arb.ca.gov Open Redirect vulnerability

Security Researcher Elicx Helped patch 30 vulnerabilities Received 2 Coordinated Disclosure badges , a holder of 2 badges for responsible and coordinated disclosure, found a security vulnerability affecting arb.ca.gov website and its users. Following coordinated and responsible vulnerability...

arb.ca.gov XSS vulnerability

Vulnerable URL: https://www.arb.ca.gov/qaweb/redir.php?locurl=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

arb.ca.gov XSS vulnerability

Vulnerable URL: https://www.arb.ca.gov/app/dislookup/lookup.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 737 VIP website status:| Yes Check arb.ca.gov SSL connection:| Grade:...

arb.ca.gov XSS vulnerability

Vulnerable URL: https://www.arb.ca.gov/listserv/listservgrp.php?listtype=" accesskey="X" onclick="alertString.fromCharCode79, 80, 69, 78, 66, 85, 71, 66, 79, 85, 78, 84, 89" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...