hertz.ru Cross Site Scripting vulnerability OBB-1210113

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

hertz.ru XSS vulnerability

Vulnerable URL: https://www.hertz.ru/rentacar/reservation/?confirmationNumber=%22%3E%3Cvideo%20src%20onratechange=alertXSSPOSED%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 960535 VIP website status:| No...

hertz.ru XSS vulnerability

Vulnerable URL: https://www.hertz.ru/rentacar/TravelAgentLoginHandler Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 985640 VIP website status:| No Check hertz.ru SSL connection:|...

hertz.ru XSS vulnerability

Vulnerable URL: https://www.hertz.ru/rentacar/templates/reservation/confirmation/confirmationPrint.jsp?b=%22%3E%3Cvideo%20src%20onratechange=alertXSSPOSED%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 151050...

hertz.ru XSS vulnerability

Vulnerable URL: https://www.hertz.ru/rentacar/location?search=%3Cvideo%20src%20onratechange%3Dalert%60XSSPOSED%60%3E Details: Description| Value ---|--- Patched:| Yes, at 15.05.2016 Latest check for patch:| 15.05.2016 19:58 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...