Lucene search

K
openbugbountySehnoOBB:455893
HistoryDec 20, 2017 - 9:01 a.m.

7910.ru XSS vulnerability

2017-12-2009:01:00
sehno
www.openbugbounty.org
9
Open Bug Bounty ID: OBB-455893
Description Value
Affected Website: 7910.ru
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Vulnerable URL:
http://7910.ru/easyletter.php?email=%3CsvG%20onLoad=prompt(1)%3E&action;=sign
Coordinated Disclosure Timeline
Description Value
Vulnerability Reported: 20 December, 2017 09:01 GMT
Vulnerability Verified: 20 December, 2017 09:03 GMT
Website Operator Notified: 20 December, 2017 09:03 GMT
Vulnerability Published: 20 December, 2017 09:03 GMT[without any technical details]
Public Disclosure: 20 March, 2018 09:01 GMT