Lucene search

K
openbugbountyDeb_securityOBB:442207
HistoryNov 29, 2017 - 4:57 p.m.

emsdetten.de XSS vulnerability

2017-11-2916:57:00
deb_security
www.openbugbounty.org
8
Open Bug Bounty ID: OBB-442207
Description Value
Affected Website: emsdetten.de
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
https://www.emsdetten.de/magazin/archiv.php?menuid=349&topmenu;=0&keepmenu;=&view;=overview&keyword;=%22%20autofocus%20onfocus=alert%60OPENBUGBOUNTY%60%20&kategorie;=154&year;=&month;=&page;=6
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 29 November, 2017 16:57 GMT
Vulnerability Verified: 30 November, 2017 08:45 GMT
Website Operator Notified: 30 November, 2017 08:45 GMT
Vulnerability Published: 30 November, 2017 08:45 GMT[without any technical details]
Public Disclosure: 27 February, 2018 16:57 GMT