Lucene search

K
openbugbountyGh05tPTOBB:895872
HistoryJul 13, 2019 - 11:01 a.m.

admin.cimarronmemorialhs.org Cross Site Scripting vulnerability

2019-07-1311:01:00
Gh05tPT
www.openbugbounty.org
5

Open Bug Bounty ID: OBB-895872

Security Researcher Gh05tPT Helped patch 6892 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectingadmin.cimarronmemorialhs.org
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: admin.cimarronmemorialhs.org
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Gh05tPT Helped patch 6892 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Screenshot: admin.cimarronmemorialhs.org  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 13 July, 2019 11:01 GMT
Vulnerability Verified: 13 July, 2019 11:15 GMT
Website Operator Notified: 13 July, 2019 11:15 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 13 July, 2019 11:15 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 11 October, 2019 11:01 GMT