srisap.com XSS vulnerability

2015-05-26T06:26:00
ID OBB:64534
Type openbugbounty
Reporter RahulKankrale
Modified 2017-11-22T08:58:00

Description

Vulnerable URL:
http://www.srisap.com/search.php?m=%3E%3C/title%3E%3Cscript%3Ealert%28KCF%29%3C/script%3E%27%22%3E%3Cmarquee%3E%3Ch1%3Etest%3C/h1%3E%3C/marquee%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E&t;=R&price;=5&Submit;=Search
Details:

Description| Value
---|---
Patched:| Yes, at 22.11.2017
Latest check for patch:| 22.11.2017 08:58 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 0
VIP website status:| No
Check srisap.com SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 26 May, 2015 06:26 GMT
Vulnerability existence verified and confirmed| 26 May, 2015 06:29 GMT
Vulnerability patched by the website owner| 22 November, 2017 08:58 GMT