Lucene search

K
openbugbountyDeb_securityOBB:452237
HistoryDec 11, 2017 - 9:05 p.m.

bradymiddleeast.com XSS vulnerability

2017-12-1121:05:00
deb_security
www.openbugbounty.org
8
Open Bug Bounty ID: OBB-452237
Description Value
Affected Website: bradymiddleeast.com
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://www.bradymiddleeast.com/products/productsearch?startingCategory=%22%3E%3Cscript%20src=https://openbugbounty.org/1.js%3E&Ntt;=e025
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 11 December, 2017 21:05 GMT
Vulnerability Verified: 11 December, 2017 21:08 GMT
Website Operator Notified: 11 December, 2017 21:08 GMT
Vulnerability Published: 11 December, 2017 21:08 GMT[without any technical details]
Public Disclosure: 11 March, 2018 21:05 GMT