Lucene search

K
openbugbountyGh05tPTOBB:994332
HistoryOct 14, 2019 - 9:53 a.m.

curso-mantenimiento-industrial.es Cross Site Scripting vulnerability

2019-10-1409:53:00
Gh05tPT
www.openbugbounty.org
9

Open Bug Bounty ID: OBB-994332

Security Researcher Gh05tPT Helped patch 6878 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectingcurso-mantenimiento-industrial.es
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: curso-mantenimiento-industrial.es
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Gh05tPT Helped patch 6878 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 14 October, 2019 09:53 GMT
Vulnerability Verified: 16 October, 2019 07:25 GMT
Website Operator Notified: 16 October, 2019 07:25 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 16 October, 2019 07:25 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 12 January, 2020 09:53 GMT