Lucene search

K
openbugbountyGh05tPTOBB:896989
HistoryJul 14, 2019 - 4:00 p.m.

admin.miamiartscharter.net Cross Site Scripting vulnerability

2019-07-1416:00:00
Gh05tPT
www.openbugbounty.org
8

Open Bug Bounty ID: OBB-896989

Security Researcher Gh05tPT Helped patch 6892 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectingadmin.miamiartscharter.net
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: admin.miamiartscharter.net
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Gh05tPT Helped patch 6892 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Screenshot: admin.miamiartscharter.net  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 14 July, 2019 16:00 GMT
Vulnerability Verified: 14 July, 2019 16:09 GMT
Website Operator Notified: 14 July, 2019 16:09 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 14 July, 2019 16:09 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 12 October, 2019 16:00 GMT