Lucene search

K
openbugbountyDim0kOBB:88646
HistorySep 24, 2015 - 7:21 p.m.

newlook.com XSS vulnerability

2015-09-2419:21:00
dim0k
www.openbugbounty.org
7
Vulnerable URL:
http://www.newlook.com/eu/shop/no-results?Ntt=x"-alert(/XSSPOSED/)-"x&filtered;=1
Details:
Description Value
Patched: Yes, at 20.06.2016
Latest check for patch: 20.06.2016 23:29 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4039
Google Pagerank 0
VIP website status: Yes
Check newlook.com SSL connection: (Grade: B+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 24 September, 2015 19:21 GMT
Vulnerability existence verified and confirmed 24 September, 2015 19:24 GMT
Vulnerability patched by the website owner 21 June, 2016 12:51 GMT