geonames.org Cross Site Scripting vulnerability OBB-4040791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

geonames.org Cross Site Scripting vulnerability OBB-1336725

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

geonames.org Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1160048 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

geonames.org XSS vulnerability

Open Bug Bounty ID: OBB-422908 Description| Value ---|--- Affected Website:| geonames.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

geonames.org XSS vulnerability

Vulnerable URL: http://www.geonames.org/maps/showOnMap?q=17276';alert/OPENBUGBOUNTY/// Details: Description| Value ---|--- Patched:| Yes, at 12.01.2017 Latest check for patch:| 12.01.2017 20:21 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 21862 VIP website...

geonames.org XSS vulnerability

Vulnerable URL: http://www.geonames.org/advanced-search.html?q=%27%22%3Enope==L=AS%3Cscript%3Ealert%28/xssposed/%29%3C/script%3E=0.6 Details: Description| Value ---|--- Patched:| Yes, at 30.09.2016 Latest check for patch:| 30.09.2016 18:14 GMT Vulnerability type:| XSS Vulnerability status:|...

Fixed XSS vulnerability at www.geonames.org

Security researcher Hanno Boeck, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.geonames.org, which at the time of submission ranked 32731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...