goshen.edu Cross Site Scripting vulnerability OBB-3130671

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

goshen.edu Cross Site Scripting vulnerability OBB-3051474

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

goshen.edu Cross Site Scripting vulnerability OBB-2383562

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

goshen.edu XSS vulnerability

Vulnerable URL: https://www.goshen.edu/mqr/search.php?s=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Type=Text%20AutoFocus%20/;%20OnFocus=confirm/openbugbounty/%20//%3E%3CSvg%3E=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 20.12.2017 Vulnerability type:| XSS Vulnerability...

mygc.goshen.edu XSS vulnerability

Vulnerable URL: http://mygc.goshen.edu/.cWtools/popup.php?=Login=Enter=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22OPENBUGBOUNTY%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

Unfixed XSS vulnerability at www.goshen.edu

Security researcher Tr0jAn, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting www.goshen.edu, which at the time of submission ranked 172396 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/07/2009. It is currently...