Lucene search

K
openbugbountyGromak123_XSSOBB:447870
HistoryDec 04, 2017 - 10:15 a.m.

infojobs.com.br XSS vulnerability

2017-12-0410:15:00
Gromak123_XSS
www.openbugbounty.org
8
Open Bug Bounty ID: OBB-447870
Description Value
Affected Website: infojobs.com.br
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
https://www.infojobs.com.br/advisor/insertevaluation.aspx?a1=1%22%20accesskey=%22X%22%20onclick=%22alert(%27OpenBugBounty%27)⁣=-65136
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 4 December, 2017 10:15 GMT
Vulnerability Verified: 4 December, 2017 10:17 GMT
Website Operator Notified: 4 December, 2017 10:17 GMT
Vulnerability Published: 4 December, 2017 10:17 GMT[without any technical details]
Public Disclosure: 4 March, 2018 10:15 GMT