powells.com XSS vulnerability

2015-10-15T10:02:00
ID OBB:92230
Type openbugbounty
Reporter dim0k
Modified 2016-06-06T14:24:00

Description

Vulnerable URL:
http://www.powells.com/cgi-bin/extra_image_navigation?isbn=978>![](x)&p;=1
Details:

Description| Value
---|---
Patched:| Yes, at 05.06.2016
Latest check for patch:| 05.06.2016 09:12 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 31418
Google Pagerank| 7
VIP website status:| Yes
Check powells.com SSL connection:| (Grade: C+)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 15 October, 2015 10:02 GMT
Vulnerability existence verified and confirmed| 15 October, 2015 10:05 GMT
Vulnerability patched by the website owner| 6 June, 2016 14:24 GMT