logo
DATABASE RESOURCES PRICING ABOUT US

analyze12.rentalserver.jp Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-984796 Security Researcher **Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations **, a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting **[analyze12.rentalserver.jp](<https://analyze12.rentalserver.jp>)** website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[analyze12.rentalserver.jp](<https://analyze12.rentalserver.jp>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Gh05tPT Helped patch 6884 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, 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) --- Research's Comment: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAEtUlEQVR4nO3dzUsbWxjH8cnkEmIdbVNNfMHYpu1CSuhCXHQRxKVgcNcXugndRJCShoJduCgtXVRaBBdSSmmh9A/oIoviQsSFiIrEtKRgQ0kdX2Jr07RQX2KMmbs4l0GKmtg7k96X72c1c3LOc57djzlxokXTNAkAABPIv7sBAMB/FhkDADALGQMAMAsZAwAwCxkDADALGQMAMAsZAwAwCxkDADCLkRnz5cuXS5cuORwOi8VisVgaGhpu3ry5vb1t4BaHU1W1qqqqbNsBAA5nZMYEg8FcLheLxbLZbDabHR8fj8fjAwMDBm5xuFOnTqXT6bJtBwA4nMWo35LZ2dk5duxYKpVyOp364PT0dDAYfPPmjSFbAAD+XYo8x4jTp0ePHtXV1TkcjkAgsLW1pY8/ePDA6XQ2NDQ8f/7806dPNptNBMz09PTZs2cdDsfr16+Xl5dFqdXV1a6urqqqKo/HMzg46HA49DqDg4Mej6eysvLKlStfv37t6+tzOp01NTXXr1/f2NgQyzc2Nnp6epxOp9vtvnfv3u7u7kHdHtQzAKDMip+Vra+vz8zMzM7Ozs7ORqPRhw8f6uPz8/PxePzFixc+n69QKMjyX9Vu3Lhx+fLlRCIRjUYLhYI+aLPZPnz4MDo6+vLly731Y7HYxMRELBZLpVItLS3pdPrt27dTU1MLCwv9/f1iWigUSqVS0Wh0ZGQkEok8fvz4F3oGAJSVdqiFhQVJkhYXF8Xtq1ev2tra9PFMJrN3pqIomqZtbm7KspxOpzVNGxsbO3HihKZp+Xzebrcnk0m9jhgXdb5//y7GJyYmZFne3NwUt5OTk+fOnRPLFUXRl0cikYsXL+7braIoB/UMACiz4s8xdrvd7XaL65aWlsXFRXGtKIo47/pJJpOx2Ww1NTWSJDU1NYnBtbW1QqHg8Xj0Ovp8RVGOHz8urpuamqqrqysqKsRtY2Oj+A5/bW0tl8vtXS6C5Kg9AwDKyfj3Y/YemukHZQCA/6HiGZPNZpeWlsR1IpFobm7ev5Asi0Q5efJkNpv99u2bJEn6A4TL5ZJlWVVVcTs/P3+kLl0ul81m+/jxo7789OnTf79nAICpSnqOuXXr1srKyrt37+7evev3+/edU1tbm8vl5ubmKisrfT7fwMDA6urq8PCw+NRqtfr9/nA4rKqqqHOkLq1W69WrV8Ph8NLSklh+7do18dFB73iW0jMAwFTFM0ZRlLa2ttbWVp/Pd+HChdu3b+87raKiIhQKPX36VJKkJ0+ejIyMnD9/3uv16hOGh4fz+bzX6/X7/XpClG5oaKi+vr61tbWzs7O7u7u3t1eSJFVVa2trf7lnAICpiryDqaqq1+v98eNHieV2d3etVmvRae/fv29vb//8+XOJZUskuo3H40fqGQBgEoO/8y8lYCRJisViZ86cMXZrAMA/zR9l2+n+/fuNjY3d3d3JZLK/v//OnTvG1t/Z2ZmcnNT/WhoA8NuVL2M6OjrC4XBvb29zc3MoFAoEAsbWDwaDkUjk2bNnxpYFAPwyw34TEwCAn/A/ygAAZiFjAABmIWMAAGYhYwAAZiFjAABmIWMAAGYhYwAAZiFjAABmIWMAAGYhYwAAZvkTTTPYQYjQznoAAAAASUVORK5CYII=) --- **Screenshot:** ![analyze12.rentalserver.jp vulnerability](/twimages/screen-984796.jpg) **Mirror:** [Click here to view the mirror](<http://984796.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 2 October, 2019 12:35 GMT ---|--- Vulnerability Verified:| 2 October, 2019 12:47 GMT Website Operator Notified:| 2 October, 2019 12:47 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 2 October, 2019 12:47 GMT Public Disclosure: ![](/images/design/information-icon.png)A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability.| 31 December, 2019 12:35 GMT ---|---