Lucene search
DavidmurdochOBB:428831HistoryNov 22, 2017 - 2:22 p.m.
bhphotovideo.com XSS vulnerability
2017-11-2214:22:00
davidmurdoch
www.openbugbounty.org
23
Open Bug Bounty ID: OBB-428831
| Description | Value |
|---|---|
| Affected Website: | bhphotovideo.com |
| Vulnerable Application: | Custom Code |
| Vulnerability Type: | XSS (Cross Site Scripting) / CWE-79 |
| CVSSv3 Score: | 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
| Remediation Guide: | OWASP XSS Prevention Cheat Sheet |
Vulnerable URL:
https://www.bhphotovideo.com/c/search?Ntt=c+%3Cbody+onload%0A%3D%27alert`xss`%27
Coordinated Disclosure Timeline
| Description | Value |
|---|---|
| Vulnerability Reported: | 22 November, 2017 14:22 GMT |
| Vulnerability Verified: | 23 November, 2017 07:02 GMT |
| Website Operator Notified: | 23 November, 2017 07:02 GMT |
| Vulnerability Published: | 23 November, 2017 07:02 GMT[without any technical details] |
| Vulnerability Fixed: | 25 January, 2018 14:24 GMT |
| Public Disclosure: | 25 January, 2018 14:24 GMT |