kosmek.co.jp Cross Site Scripting vulnerability OBB-3218305

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

kosmek.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-410669 Description| Value ---|--- Affected Website:| kosmek.co.jp Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

kosmek.co.jp XSS vulnerability

Vulnerable URL: https://www.kosmek.co.jp/phpfile/login.php?lang=2%3C/title%3E%3C/script/%22-alert0-%22%20--%3E%3Cimg/onerror=%27;alert/XSSPOSED/;%27src=1%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicl...