Lucene search

K
openbugbountyDrok3rOBB:388719
HistoryNov 02, 2017 - 11:37 p.m.

giclees-de-sperme.sexomatic.net XSS vulnerability

2017-11-0223:37:00
drok3r
www.openbugbounty.org
6
Open Bug Bounty ID: OBB-388719
Description Value
Affected Website: giclees-de-sperme.sexomatic.net
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://giclees-de-sperme.sexomatic.net/ejaculation-faciale.php?AP_CA=%22%3E%3CScRipT%3Ealert%2831337%29%3C%2FScrIpT%3E
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 2 November, 2017 23:37 GMT
Vulnerability Verified: 2 November, 2017 23:39 GMT
Website Operator Notified: 2 November, 2017 23:39 GMT
Vulnerability Published: 2 November, 2017 23:39 GMT[without any technical details]
Public Disclosure: 31 January, 2018 23:37 GMT