Lucene search

K
openbugbountyNopernikOBB:72631
HistoryJul 15, 2015 - 1:15 a.m.

hasbro.com XSS vulnerability

2015-07-1501:15:00
nopernik
www.openbugbounty.org
6
Vulnerable URL:
http://www.hasbro.com/mylittlepony/en_US/search/_/Ntt-%22-alert%28%27xssposed%27%29-%22+?Ntk=All&Ntx;=mode+matchallpartial
Details:
Description Value
Patched: Yes, at 27.07.2015
Latest check for patch: 27.07.2015 22:52 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 7388
Google Pagerank 6
VIP website status: Yes
Check hasbro.com SSL connection: (Grade: B+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 15 July, 2015 01:15 GMT
Vulnerability existence verified and confirmed 15 July, 2015 01:17 GMT