Lucene search

K
openbugbountyMetamorfosecOBB:982193
HistorySep 28, 2019 - 10:11 a.m.

securehotelsystem.com Cross Site Scripting vulnerability

2019-09-2810:11:00
metamorfosec
www.openbugbounty.org
8

Security Researcher metamorfosec Helped patch 1935 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affectingsecurehotelsystem.com
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: securehotelsystem.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **metamorfosec Helped patch 1935 vulnerabilities
Received 9 Coordinated Disclosure badges
Received 31 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Cookies:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAUFklEQVR4nO2df0zTx//H32KHtRYELEV+KNCZaggyRhzRxRlCyFZdwxrnJlOGDtlGCPMHccY555g6pwYJI46gccYZ49iykIY4ZowzhBBD0LCGMVYIq8hqx2pBflQs0PX9/eOyy/vzft9d+wa6+Z2vx1/v3vvudXfPu/f7+r57v183h+d5DgAAAACCQMi/XQAAAADgPwuMMQAAAECwgDEGAAAACBYwxgAAAADBAsYYAAAAIFjAGAMAAAAECxhjAAAAgGABYwwAAAAQLPyPMXfv3p3zN3Pnzk1OTj5y5Mhff/2FToWFhYkiR0ZG+k04Nja2a9euxMTE+fPnL1++/MSJEyhclArz+eefs1PRTglLKLT81FNPrVy58ptvvglEoz179syfP/+rr766c+fOK6+8EhkZGRMT8/bbb4+MjEjjDA4Ovvnmm9HR0fHx8R988MHU1BTbeHd39/r16xcuXBgTE7Njxw6hTY7j1q9ff+bMGVGSsbGx2NjY7u7uAMNF0EooLYm0LdavXy+tssg+7gPS7uGXiYmJN954Q1YqWq2F0kkrkpycTKxyIJaxTdzVGR1Dyv3797du3bpo0aL4+Pg9e/ZMTEywKyhLk8CNT6N1AGAaBPQco1arPR6Px+Nxu91ms/nKlSvHjh2bScLCwsL+/v5r16719/fX1NRcvXq1vb1dmgpTWlrKTsU2KLXscDgOHjxYWlr6/fffs6swODhYXV3d2tqan59vNBpXrFhhtVpbW1tdLldJSYk0TkFBgc/ns1gsN27caGpqOnz4MNv+hg0bEhISrFZre3u7x+MpLi7Gp7q7u9vb2wsKCkRJqqur8/Pzly9fHmC4CFoJiSURtUVDQ4O0yuzsAmdiYsJgMHi9XlmpiLWWSiesyNGjR9PS0jim+DTLRGgdg0hBQYFSqezs7Gxubu7o6Dh48CAjslxNZBkHgH8C3h99fX1qtVoY0tLSkpKSQjzV19cXERHBTjg+Pq5QKIaHhwPMDsFIxTgltCa1XFtbu2HDBmIxpBacTqdCocDhFoslISFBFMftdoeEhOCStLS06PV6hnGPx1NVVTU6Oop+dnR0YJs8z5eUlBw8eFCUZHR0NDU1FSfxGy6CVkJiSWhtwdObiRf0AUYcWsKjR4/KSkWrtUi6gYEBg8GAf6akpNTX17PF96snriajY0hxu91KpdLtdqOfbW1ty5YtY1RQliayjMttHQCYHtNZj1EqlXL/bAoT+nw+juMUCoWstIxU0zPIcVxmZmZnZycjwuDgYFJSktvtnjNnTmNjo16v/+KLLziOe/ToUW1t7dq1a0Vxzpw5o1KpFi5ciJInJCQ4nU50fOvWrTVr1syfPz86Ovq11167d+8ex3Hz5s3btWsXmrKYmpq6dOlSdnY2ij8yMlJXV4ce4IScPn1679690lkOafjExMSOHTvCwsISExM//vhjNHnocrmIJaSVxOfz7dq1KyYmJiYmZs+ePciIsMporuzevXsvvfRSWFjY8uXLL1++LCzYiRMnYmJiIiMjt23b9ujRI4YaiYmJH374obQViJEZakili4mJ+eGHH7A1p9NpNBoZ4tMsE6sZHR1N7BhE/RcsWPDo0aMFCxagtJOTk6GhobOlCcO4X4gG0XzaqVOnkpOTIyMjt27diqcB//jjj5dffjksLCw5OfnUqVPE2VHhdCItC6Idmno0iJHlFh4IFn5HIdH/HafTaTAY9u3bJz3FM59jhAlzc3ONRmNLSwv+z0XLTggjFe0U+zlGWFqNBBRutVrRNIvX67XZbOHh4UqlUqFQrFixAueF49hsNmEWQvu1tbXnz58fHh4eGBjYvXu3yWQSlqS+vl6hUGRlZXk8HhRSUVFRUFAgqqbb7dZoNDqdLi4u7sCBA16vlxF+4MCBvLw8m83W1dWVlZV1+vRpqQjCEkpL0tfXx3HcgQMHnE5nb29vampqRUWFVBae500m06ZNm/r7+1E0/BzDcZwwvLy83K8axMdNYmSaGkTpMCUlJTt37mSLT7NMrCbP88SOQdRfhMFgOH78+CxqQjMuRWSTaBC1YEFBgcPh6OnpWbt2bUlJCYq/ceNGk8k0MDDQ29ublpZGfHIV9S5iFkQ7DPWI1ymtq8sqPBAkAhpjOI5DzRkVFaVUKouLi9HVKDyFIwjHGFrC0dHR/fv36/V6hUKxbNmy8vJyfBlLbZaWlqJTjFS0U4GPMXYJ0lQ7d+7MyMhoa2u7du1aQkLCuXPnRHH83sERvb29ixcvFoaMj483NzenpqbW1taiEJ1OZ7FYRBYqKipMJpPL5UL3uOrqaka4RqPBo6DFYsnMzAykhMKSeDye1tZWfMpsNiMjIjter1epVPb396Of9fX1wjFGGL5q1Sq/arDncISRaWoQpUN4PJ6IiIj29nZalRmWadXkKR2DqL+Q8vLynJwc3IdnRROi8f7+/qSkJFEEhk1sELUgnjBsaWnR6XRYCpvNJpIiwP6Ps6DZ4enqEa9TWleXVXiaUMAMCWiMUalUqDkdDofwkhCeQrS2tgrHGFpCjMfjuXnz5urVq/HsudTm0NCQ31S0U4GPMYzqo1STk5MqlaqjowOFX758Gd8xAxlj2tvbc3Jy4uLiRCOxkMbGxoyMDJ7n6+vrs7OzpSXU6/X4HtfQ0IALIA0fGhoSDtVRUVFarZZdQmJJhFitVnwvE9pxOBxKpRJH6+rqwnccUTgqA1sNaTPRIhPVoEmHqKurS0tLk9ZXVGWiZVo1iR2Dpj/GbDbrdDqXy+W3mrI0IRr3er0Oh0NUX5FNokFab3E4HKGhoVIp2L1LmgXNjl/1hMjt6rRMaUIBMySgNYyQkJD4+PhATonWaRgJEfPmzVuzZg16gefIkSMzSeX3lJShoaHw8HB0HB0dLTp7//59UeTJycmVK1ein+np6Xa7nW1fiMlkKioqqq2tVSqVdrvdYDBwHDc1NWWxWJ577jkUR6fTORwOjuOqq6vLyspEFh48eGCz2ZYsWYJ+6vV6FJkY7vF4QkJCbt++jZepQkJYa2+0kohAS18zh6iGrMg0NYjSYS5cuFBYWIiOaVWmWaZB7Bhs/X/55Zfi4uKrV68uWrRoFjWhGZ87d25sbCzDmtzcp0fgWTDUk16nHR0dsro6g0CEAuQie518Vnj48CFemeQ4Dk3rzyTV9Ay2tbWlpqaiY4vFwo4cExOjUCh+++23p59+muM4q9WalJQkiqPRaMbHx0dGRtCiut1u12q1HMfdv3/f4XB89NFHKJrL5UIHPp/v+eefdzqdaNWxp6dn6dKlHMc1NTWhK8fn842OjqLrym63+3y+O3fuoG87rFYriqxSqaThsbGxKpVqaGjo2WefDaSExJL8+OOPe/fu/emnn1Darq4uaZU5jkMWfv/9d3Rf7unpwac8Ho8wHBWYpgYRWmRirWnSob8L9+7da2pqunjxIlt8mmVaNYkdg6Y/x3EPHjwwmUyVlZXPPPOM32rK0oRm3C+ycuc4TqvVhoSE3L17NzExkeM4q9WKwqOiosbHx8fGxtDKv/BPGDELmh2GetLrlBFZVuGBYOH3SUfWC6zsd5cRVqtVq9WePXvW4XAMDw+jqfBjx44JU4m+j/F6vYxUjFPSuTJk0OVy1dXVaTSaK1euBF790tLS7Oxsm83W3t6u1+svXLggjWMwGPLz8/EyI57N02q1NTU1w8PDPT09JpMJq2Q0GvPy8ux2u8ViSUlJqamp4QWTzq2treHh4Xje2WQyGQyGvr6+jo6OlJSU8+fPIyPE8OLi4tWrV3d2djocjpMnTx4+fJhdQmlJhoeHNRrNoUOHXC5Xe3u7cM1D1LhoMdxut3d2dqanp4vW/HE4XvOnqUHsNrTIxFrTpON5/vjx46K1caL4bJ2l1aR1DKL+Xq83Jydn586dwu49W5rQjLvdbtxXMaOjowqFwmq1oklsokHG3NemTZtMJlNfX19nZ6dw2TwzM7OoqGhgYAD1LmEtiFnQ7NB6LxFi5GkUnigUMEP+hTGG5/nGxsasrKzw8HCVSpWWlnb27FmhBelAWFVVxU5FOyUaY7BBhUKRkpJSV1cnq/roa1CtVrt06VL8hpUojtPp3LJlS1RUVFxc3P79+ycnJ1F4c3PzqlWrlErl4sWLy8rKsEpOpzMvLy8iIiIhIeHo0aPS3IVXqcvlQsaXLl0qfGWIGO7xeHbv3p2QkKBSqTZs2IAXOWklJJbk9u3ba9euVavVOp3u5MmTxCrzPG+321988UW1Wq3X6ysqKoR3qJMnT2q12oiIiIKCgvHxcbYaUsuMyDQ1iNLxPL9ixQqz2SwMoYlPs0ysJk/pGET9pd0bG5m5JjTjtCtx//79KpUK3VVpBmm36YGBAaPRqFark5KSjh8/jsN7e3uzs7PVanVKSkp1dbWwFsQsaHZovZcITWq5hYdvhoLBHJ7nZ/GpCACAx427d++mpqaOjY0FyX53d/e6dev+/PPPx8TOtDMNtlBPJuATEwD++2zfvj14xi0Wi06ne3zszCTToAr1ZALPMQDwH2diYkKhUMydO3cWbR45ciQuLi43N9dms23ZsuXQoUPbtm37F+3MSqbBEArwvx4DAAAgorm5OSMjIzQ0dNmyZWi59N+18/hn+sQie4zxuywmijA8PIzfGZt5FuyvJqVrnuirXZfLlZ+fr9FoRKvcQ0ND+fn5aPV73759ONxqtRoMhvDwcK1WW1hYiDxIyjUit2p+YSs5k3YRHv8zy54ejycvL0+0JCtqO6EXy9HR0cWLF1utVhzCll0aXxrIyFHaARiRZXUAAHjSkL0ek5iYyH59XhQB3b9mNwsGRBfuNG/2hYWFPp+vo6Pj+vXrzc3NuJxEl+9yjcw6bCVn0i7C45mIHyA0f/W0fQQ4kpt9tuxEt/zSQFqOsrY5+Mc6AAD8vyTYg9js/i9mP8cQXbgzvNkLdwTAGxYQXb7LNcIo/7TVmHUlGV52gkofyV89owxSN/ts2Ylu+aWBtBxlbXMgtwMAwJOGn+eYzZs3f/rpp/jnmjVrKisrhe67b9269cILL4SFhcXHx7/66qu//vqr0L/3yMiI0An8w4cP33333ejo6CVLlnzyySdCF9yfffZZdHR0bGzsl19+KfIQzvAbL4Lowp3mzd7j8fh8Puz8XKlUjo+PcxQv93KNBAjR27lUUqmSs9gutbW1QsuinUOxd/QFCxZs3rx5cHDw/fffj46OXrRo0VtvvfXw4UMUU5Yndpq/euI+AhzJzT5bdqJbfmIgMUdZ2xzMsAMAwH8f9hD03XffYceLyCfgzz//LPxDp9Vqz507NzQ0ZLPZKisrbTab6B+f0Al8YWGh0Wjs7+/v7OzMyMhAH41jF9wDAwNXr161Wq3Eb8ilDtVp3vgR2IU741OsVatW7d69e3JycnR01Gg0btq0SWhB5OV+ekZEiOwQvZ1LJZUqObvtIjyWfrWan59vt9vRZ9sajWb79u3IR0BWVhZ2ki/LEztRij7KPgI0N/s02YnxiYG0HGkdgBZZVgcAgCcNP2PM+Ph4eHg48kFbU1OTm5srvDUMDQ0pFArsDANBmwPxer1qtRrfMRsaGlavXs3/fakLnSsH4jeep3vj5//XhTtjeOjq6kpPTw8NDVWpVBzHXbt2TVR37PJ9Gkam51CdKKk07Sy2C/uY4zjhRFBISAj+Vv/mzZt4m0VZntiJ5aHtI0Bz4E+TnRifGMjYuQCLHMg2B+xeBABPOP7XY/Ly8tA1mZOTc+nSJdGtIS8vLz09vaysrKKioqmpiaffy0QutXt6evAeFVKHNH79xrMRunD3681+eHi4srKSuLUJ/7fL92kYmbZDdamkxLSz1S4BHktrjX/K8sROq44IvI8AbTsDhFR2Yny2EVGOIvxuc0ArCQAAfCDvlb3++utms/nBgwdtbW25ubmis19//fW5c+fS0tImJyfLysree++9WZi/C4xoCfiU0IW7X1QqVVVV1aFDh9DPqampW7du4bM0L/dsI1zADtXXrVvX3NxssVgaGxtRYICSPj7tgj2xWywWi8XS0dGBneMy2sgvPp/Pr5t9kezE+IH76kc7FwTYAUTbHEg7AAAAHBfAe2UejycqKqqqqmrjxo088++nxWKRvoETyFwZ4zlGNFdmNpv9zpXZ7XalUul0OtFP2ithmLNnzwr/qKI3hfDcXUNDQ2ZmplwjNETeMxUKhVA96SMaklSalp+9dgnwmKc/x/A8r1arRZtLIgKfK7t+/Xp6ejr+WV9fn5mZiUYv3GfMZjPqMxhp20nj04wQc+QpHYAWmVYSAAAQAb27vGXLlvDw8G+//Zb/31tDV1eXwWC4ceOGy+Xq7+8vKioyGo2ie4fb7VYoFD09PTzPFxUV5ebmStf8GWMMT3eoTkPqwp3mzZ7nea/Xq9PpGhoahPGJLt/lGpmeQ3WipFIlEbPVLsLj6Y0xsjyxE43T9hGgudmnyU6MTwxk7Fwga5sDWkkAAOADHGPMZrNarUaLvcJbw+TkZHl5uV6vDw0N1Wq1+fn5AwMD0jGjvLwcuRB3u93vvPOORqNJSEgoLy/Hr/ewxxiaQ3UaRBfuRG/2PM9fvHhR+veT6PJdrpHpOVQnSipVEv2crXYRHk9vjJHliZ2mD3EfAYYDf6LsxPg0I7SdC2Rtc0ArCQAAPPj2Dx7gJxwAAAB8+wcR8BMOAMATDjzHBAvwEw4AAABjDAAAABAsYK4MAAAACBYwxgAAAADBAsYYAAAAIFjAGAMAAAAECxhjAAAAgGABYwwAAAAQLGCMAQAAAIIFjDEAAABAsIAxBgAAAAgWMMYAAAAAwQLGGAAAACBYwBgDAAAABAsYYwAAAIBgAWMMAAAAECxgjAEAAACCBYwxAAAAQLD4P4vBLOvx448hAAAAAElFTkSuQmCC)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: securehotelsystem.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 28 September, 2019 10:11 GMT
Vulnerability Verified: 28 September, 2019 10:19 GMT
Website Operator Notified: 28 September, 2019 10:19 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 28 September, 2019 10:19 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 27 December, 2019 10:11 GMT