logo
DATABASE RESOURCES PRICING ABOUT US

16demibrigade.e-monsite.com Cross Site Scripting vulnerability

Description

Open Bug Bounty ID: OBB-989079 Following coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147](<https://www.iso.org/standard/45170.html>)** standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence. Affected Website:| **[16demibrigade.e-monsite.com](<http://16demibrigade.e-monsite.com>) ** ---|--- Open Bug Bounty Program:| **Create your bounty program now**. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| **[XSS (Cross Site Scripting)](<https://www.owasp.org/index.php/Cross-site_Scripting_\(XSS\)>)** / CWE-79 CVSSv3 Score:| 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] Disclosure Standard:| Coordinated Disclosure based on **[ISO 29147](<https://www.iso.org/standard/45170.html>)** guidelines Discovered and Reported by:| **Gh05tPT ** Remediation Guide:| **[OWASP XSS Prevention Cheat Sheet](<https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md>)** Export Vulnerability Data:| Bugzilla Vulnerability Data JIRA Vulnerability Data [ Configuration ] Mantis Vulnerability Data Splunk Vulnerability Data XML Vulnerability Data [ XSD ] Vulnerable URL: ![](data:image/png;base64, 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) --- HTTP POST data: ![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAUwUlEQVR4nO2df0wT5x/HT6xYSkHEUhGqFjQViWNIlODGDMFvXMMI6TJ1jHWKzjgkjDHiHBCyMSTICO4HWwhxuuBinFsWQoghjDBDGsYQsDk7xmqDrHa1MixYWCUnFO77x8XL7X71Wig/9PP6q/fc83zu/Xye555P77m751bgOI4AAAAAgA/wW2wBAAAAwFMLxBgAAADAV0CMAQAAAHwFxBgAAADAV0CMAQAAAHwFxBgAAADAV3gQY6Kiom7duuU7KV7gI0lLraZLTQ+w6Ny6devkyZOLrQJwD7SU0Bjz+++/z87OPv/88z5V4xE+krTUarrU9ABLgezsbKVSudgqAPdASwmNMc3NzRkZGT6VQuPu3btBQUE8GfglUYuPj4+fPXtW4HFJsw8fPjx69GhYWFhkZOSHH344PT0tWPt/BNy9e3ft2rUelWXV8++//7733nubN28OCAjYtm3bp59+OjMzQ2a7dOnS9u3bAwICtm/f/tVXX1FlrKCwcePG4uJisi5UL1Fzrly5Mioq6syZM8QhVrDhdY2Yh/aIZe0Hr2tN7cOjo6MGg6GgoMCtQ3h6vtdKWHn//fcDAgIuXbo0Xwap8LTpvFSBy74Q+M9uWks9o+DCSExMbGtrE5h5XjCbzVKplCeDW0kYhgk0xWo2IyMjKyvLarUajcbk5OSioiKBFmgHNZvNISEhHpVl1XPgwAGNRmM0GkdGRtrb21NSUnp6eog858+fVygU165ds9vtHR0dW7duLS8vp8rAMAzDsMnJSYPBkJSUVFpaShPJzImiaGJiImGHSDQajSEhIdgTvK4R89Aesaz94HWtmQqFOIT/cHNvRAK73e7n54eiqMvlmheDVNy2qe/sC4H/7J4XhcsdQTHGZrOFhIRMTU35Wg0V/ubxSJLwlibNTk5OKhQKp9NJpPf09GzdulWIBRKr1ZqQkED8SExM9Kgsqx6RSORwOFizKRQKarjV6/USiYQQz6x7Z2dnTEwM8Ztn5CJyxsbGkptzDJY0vDv9lrsf5j3G8DtkYcY4nx7FozadX/tCgBjjFkFzZc3Nzfv371+1ahWCIL29vS+99FJQUFBkZORrr732559/Igjy+PHjt99+OygoaPPmzR9//DF5qd7b27tnz56AgICwsLCDBw/eu3ePuLw9e/ZsWFjYhg0bLl68iCDIzMxMcXHx+vXrAwMDDx48ODo6Sh76yy+/jIqKWrdu3VtvvTU+Pi5cEnkdPT4+rlQqnU7nihUriGt5LrVUswEBAX///XdgYCCRPjg4GBERgSDIvXv3Xn755cDAwC1btnz++ec8l8mRkZE3b94kfty4cYNI/Pnnn916m5qH1DM7O4sgiEgkYuYfHx+3Wq0pKSlkys6dOzs6Orjsi8ViDMPcyiByulwugVLniFtTRIZl5Adm52fmYe2KzHOE2YdJ+B1Clvrss89oNmnTg0FBQefOnYuKilq7du2bb75Jnmv3799/5ZVXgoKCoqKizp07x+zwo6OjVG2sJ/ijR4/eeeedsLCwjRs3fvLJJzMzM9QjBgYGvv7666Ojox988EFYWNi6deuOHj366NEjRFibsg4RrM5ndSyPfaZsIp0YBIKCgrZt23blyhX+1gSExhjyzkd6enp2drbFYuns7ExOThaLxQiClJeXE/MPra2tOp2uvr6eyKzX60+cODE8PNzf369QKPLy8hAEcTqdRqOxv7+/oaEhOTkZQZDq6ur29vb29naTyRQRETEwMEAUdzqdKIp2dXX19PTYbLaioiLhkkjWrFljNBqJ2Q+tVsujFuG4x3P79u1Tp07V1NQgCJKXlxccHGw0Gtva2hoaGsg8YQxYPZmdnb1v3z4i9jDp7e3dt29fdnY2U09gYGBaWlpmZuavv/5KnH4kTqdTLBYT4ZZk9+7dZICkMj4+XlZWlpaWxiqAyoMHD0pLSzUaDU8e/up4BI8pqluWkR9YOz8Nrq5IO0eYfZiExyHUUq+++irzvKPidDoNBgNxrlkslpKSEiI9Ly/P399/cHCwvb39u+++Y1Zh3bp1NG3MA+Xn59tsNr1e39ra2tzcXFdXhzw5uzs7O1EUtdlsMTExdrvdYDB0d3ebzWZCgNs25RoiuJxP08Zvn1U28mQQGBgYaGlpocYYnoHlmcbtlY7T6ZRKpWNjYziOj42NiUQi5jSuTCYjry6J+WumncHBwfDwcLPZjCAIYY1ELpfr9XpafiLnxMQEsdnV1RUdHS1cEs/sB5daqlkSq9UaHR199epVHMddLpdYLLZYLMSuxsZG8jLZyoDpAeIQlZWVoaGhhw4dMplMZLrJZDp06FBoaGhlZSWpjaZnYmKiqKhIpVKJRKKtW7eWlZUR09/81+OEG2VP8Pf3z8rKIg9B8xKZMzQ0VCwW5+TkUB3LnBbgqo4QaLJZTbG6ZTn6gej8TJGsXZH1HOHpz1wOoeZk2mRWmTzXOjs7iXON6PBDQ0NEOrXD82ijHcjlckmlUtJIc3NzUlISkY2c4uvs7PTz85ucnCQ2u7q6iKlpIW3KOkRQoTqfxwk0WGXjvIMAszVhrgwXcj+msbExNTWV3MzMzIyPjy8sLKypqeno6MBxfGxsjHr2hoaGyuVyIrNer//f//4XERFBpIeEhDCd7nA4RCIR824hLSf1xHYrCec+J3nU0swSJCUl1dbWEr9tNptYLCZ3DQwMeDcvPzY2ptFoRCIRmSISiTQaDW1WnVUPjuMYhnV1dZG3rK1WK1UVDbPZLJFIiLDX0NAQHh5Onsk4w0tkTpvNxtoirPWlVUdGgSsF5zi9aaZY3bJc/MDs/LiwrsjqGf47RqwOwf8bY2hFeAySFbTZbP7+/mQ6V4fn10YzYjKZiP+aXGc3ddNtm3IZcet8Ah77rLJx7kGAtTUhxuBC7sfQpo++//77CxcuxMXFTU1NFRYWvvvuuxiG+fn59fX1oSiKoqjBYEBRlMis0Wj27t2r0+lQFG1paeE5ysqVK90qES6JpyyPWuZE2f379w0GA79BAoFzZQiC3LlzJy8vT6fTlZeXk4nl5eU6nS43N/fOnTtc1SRZvXr1nj17amtrf/zxRwRBiGkK2qPVN2/eJGdO/Pz8IiMjIyMjjxw5IpPJLly4wKWNzLlhwwaBLcKsDkqBK0WgKVa3LBc/uO38PF3RO2gOeQpw26ZcCBx5vLbPZN5b8+mBPwS5XC6ZTEZeMNJAUVShUOA4LpVKmZNdIyMj1L/qKIqyXsfgOC6Xy1EUpSVy/UkRKInnvxWrWlazLpeLmkK7TG5qavJ0riwnJ0cqlRYWFtrtdtouu91eUFAglUpzcnJY9dCeddHpdOTMgEKhaG9vJ3f19/dzPXtz9epVhULB+lS32/9czP/vPNXxFC5TNLfgy8QPrJ2faZy1K3p6HcPjkDlexxAd3mw2E+kC58poB+KaKxNyHYN70qZkKYHO57cvcK6MOggwWxOuY3C3c2U6nW7Hjh3k5sDAgFqtvn79ut1ut1gsx48fT09Px3E8JycnKSmpv7/fZrNVV1eTD5jL5fK6ujqHw2EymTQaDVeMqaysTExMNBgMVquV+DOIc3cggZKoxZ1Op0gkIifKWdXSzJLQ7vRoNJoDBw5Yrdb+/v74+HhP58q0Wi15xrJiNpu1Wi1Tj9FolMvl58+ft9lsDoeD2FtZWUnspT7jr9PpYmNjKyoqSIM0h8fGxtbX1zP3ejG2uq0OP1Tf8psi3bKM/MDs/DiOT0xMiEQio9FITMGxdkVWAdQ+bLFYyOkafoeQpbyLMfiTl2/MZnN/f39cXByZTrtBxe+948ePZ2RkWCyW/v7+hISE2tpa4TFGeJtSS7E6n1Ubj32mbCKdaxBgtia1pZ5Z3MSYU6dOlZSUkJtTU1NlZWUqlcrf318ul2u12uHhYRzHMQwrKChQKBQSiSQtLY0M/jqdbteuXWKxODw8vLCwkCvGuFyu06dPy2QysVis0WiIP4NcHUigJFrxsrIyiUTS0NDApZZmlnZQEqvVun//folEEh0dXVNTM4/vi9Bg6mlpaUlJSQkODpZIJHFxcefPn6fubWhoiImJEYvFKpWKPBlwtvPq8uXLSqWSeLVojmPrXPD6L95y8QOz8xPpRUVF/F2RSwDZhzEME4vF5H8mfocQpc6dO+ddjBkeHk5PT5dKpUqlsqqqinWwdus9p9N54sQJmUymUCiIRxKExxhccJtSS7E6n8uxXPaZsol0YhCQSqUqlYo6CDBbk9ZSzyZuYoxKperu7l4YKQLxkSQvzM7vmDt3PcCzQ35+PuvzID6FuGZa4IMudxalpZYUK3AcX+xbQsuVu3fvxsfHP3z4cLGFAM8c09PTKIru3r17IQ/6ww8/fPHFF7/99ttCHnS5sygttaSA78c8bUxPT7/xxhv//PMP6yY/8BGB5cKqVasWZtg6c+bMxYsXHzx4cOPGjZKSkpycnAU46NPEgrXUkgVizNPGqlWr/P39T506xbrJA3xEAGCSkpJSV1enUCi0Wm1+fv6RI0cWWxGw3OCfSiPejKWiVCqJXRiGZWZm8twdZc1gt9u1Wq1MJouIiCgqKmIuaqlWq8mnfVihZRgaGsrIyAgJCZHL5cePH6e9r8fUr1ariV1Go1GtVgcHB8vl8mPHjvG86MesBU/dJyYmwsPDjUYjqzVWtW594raaNJ/o9XrifTHWTS4qKiry8vLIWuTn52/atIm4EVpVVUXe8CRvkMbExNBuwFL9rFAoqHWh3RYms/n5+SmVyvLyctK+F70UAIAli/vrGOmTdc4xDKuoqIiLi0MQ5PHjx2q1mmehQK4Mhw8fnp2dRVH0+vXrHR0d1PcQEQS5ffu2Xq8/fPgwl1lmhvT09JiYGKPR2N3dbbfbc3NzefRjGNbc3Eykp6WlKRQKo9Go1+sxDGOdBGCtBX/da2trtVrttm3bWPeyquX3idtqMn0SGhrqdDq5NrmgvvJ57Ngxi8XS1tZmsVjq6upaW1v1ej2CIN98801paWlNTY3Vaq2vr6+trT1z5gxpQUpZEr+lpYWrLtScTqezqanp2rVrlZWVxC7W9fPdigcAYInCH4KGh4fJP/44jsfGxjY2NuI4bjabKyoqeJ7yZM3gdDr9/PyoixSpVCpqqdzcXHIZDFZoGZgvWxEvYFJlcK268cUXX5ArHRkMBlpBnlrw1H1iYmLHjh2kWRqsat36xG01mU7jebSUC+q3EniWi1+YxfNxHz+zBwDAguHBLERPT49MJqPO5Ah5k4BnsKONIw6HIzQ0lHi7hRXWDLGxsV9//TWO45OTkzk5OZmZmTQBEokkPz9fLpfL5fKCggLm8lNTU1OnT58+fPiwwFrwJFZWVhLvPXDBVMvvE7fVZPWJwBjT2tpK/q6vrz906BDxm3hxj/kJDYfDgSAIbSqvp6eHK8b09fWRM6v8Maavr48WWWl+oEoFAGAZ4UGMyc3Nzc/Pp6bMb4ypqanhGei5MgwNDQUHB4vFYpFIFBMTQxsZian/kpKSkZGRwcHBHTt21NTUUDM0NjaKRKKUlBSebwIKjDFOp1Mmk0VHR0dERJSUlLB+E5CpVmCM4aomq0/cxpienp7U1FTqTZq0tLTLly+TmxkZGenp6Z2dnVR/erRAocPhSE9Pz83NZe6l5RwZGVGr1adPn6ZZo/ohPDw8NTW1r6+P6+gAACxNhMYYDMNCQkI8XY3HoxgTHR2NoijPJAlrhvz8/ISEhJ6enra2NoVCceHCBZps6puMTU1NtO8OTE5OEstv8DxoIDDG1NTUEIsUEMGMej+cR63AGMNVTVaf8LhdyEcEcI7l4vmb2zx/i+cz/TCXjwgAALCICI0xV69ejYuLoyXOY4wh17HnGmRZM0xNTUkkEoPBQGxeuXJl165dPHqMRiPrE1YtLS3Ed5GF1IIrUaVSkSvlNTc3M5WwqhUSY7iqyeU0Hrd79BEB/L/LxS/Y4vlcfmB+EwEAgCWO0PdjGhoajh075pvHDhAEQWprawsKCjzNMDY2NjU19dxzzxGb8fHxVquV/0DEt2mnp6d7e3vJxOjoaJvN5o3uJzx8+HBoaGjjxo3EpkqlYhr0Qi1/QbdOY+LRRwSQ/y4XL11ii+cDALD0ERRj7t2719HRkZWVNceDyWSyyclJ8pvbVqtVLpcTvzs6OrKzs8PCwhISEiYmJpifYGHNsH79epFIRA6XRqNRqVRSS/3yyy87d+4kNwcGBogMs7OzL7zwArkMjMlk2rRp01yqJpFIZmdn//rrL1IJ0yCrWh6f8BdEBDiNSXFxsclkksvl8fHxJ0+eRBBkZmbm2rVrtBhD+34GhmEul2vNmjUKhUKn05Hpf/zxx969e1kPVFpaWl1d/fjxY349Ajl58mR8fHx4eLjJZCouLp4XmwAALARCLnaqqqo0Gg0z3dO5MhzH1Wq1Vqu12Wwmkyk5OZl86Jb87Ep3d3dwcDDzEyxcGfLy8lJTU4eGhvR6vUqloj3W5XA4ZDLZRx99ZLfb9Xo99TZJenp6Zmam1WpFUTQ2Nraurk54LVgTNRqNWq02m80GgyE2Nvbbb79lmmJVy+UTtwW5fDI4OEidaKJtkvpZPyKA8y4XvzCL5+OMubI5fkQAAIDFQlCMiYmJaWpqYqa7fX6JmTIyMpKVlRUaGsr1Tjs5uHCNRLTRB8OwvLw8uVy+adMm8pkxatm+vr7k5GSpVBodHV1dXU1VkpmZGRISolAoeAZK4Yl2u52o2qZNm6qqqlizsapl9YmQglw++emnn6g3z2ibNFg/asCzXPwCLJ7PrBEAAMuU+VylQ8jYsTDWvC47v1VYFCUYhimVSvLBM9omE/iIAAAAvkM0vzNvtNshi2jN67LzW4W5GPSu4OrVqy9fvvziiy+ybjK5ffu2d/IAAADcMp/fjxkdHXU4HFu2bFl0a16Xnd8qLCklAAAACw98owwAAADwFfD9GAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfAXEGAAAAMBXQIwBAAAAfMX/AeeNPYb5khYlAAAAAElFTkSuQmCC) --- **Screenshot:** ![16demibrigade.e-monsite.com vulnerability](/twimages/screen-989079.jpg) **Mirror:** [Click here to view the mirror](<http://989079.openbounty.org/mirror/>) ### Coordinated Disclosure Timeline Vulnerability Reported:| 8 October, 2019 10:33 GMT ---|--- Vulnerability Verified:| 8 October, 2019 10:43 GMT Website Operator Notified:| 8 October, 2019 10:43 GMT a. Using the ISO 29147 guidelines| ![](/images/done.png) ---|--- b. Using publicly available security contacts| ![](/images/done.png) c. Using Open Bug Bounty notification framework| ![](/images/done.png) d. Using security contacts provided by the researcher| ![](/images/done.png) Public Report Published [without any technical details]:| 8 October, 2019 10:43 GMT