legolandholidays.de Cross Site Scripting vulnerability OBB-3584970

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-3507926

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-3471429

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-3217958

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-2859758

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-2817126

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-2815900

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-2558417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

legolandholidays.de Cross Site Scripting vulnerability OBB-1336794

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

legolandholidays.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1166193 Security Researcher raviakp1004 Helped patch 751 vulnerabilities Received 4 Coordinated Disclosure badges Received 6 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting legolandholidays.de...

legolandholidays.de XSS vulnerability

Vulnerable URL: https://www.legolandholidays.de/booking/package/results.html?==0=2000=%22%27,;%3C/script%3E%3Cscript%3Econfirm%27OPENBUGBOUNTY%27%3C/script%3E=29.08.2017=5=03.09.2017=0=100=%5B%7B%22numberOfAdults%22%3A2%2C%22childAges%22%3A%5B%5D%7D%5D=LLDP2 Details: Description| Value ---|---...

legolandholidays.de XSS vulnerability

Vulnerable URL: https://www.legolandholidays.de/booking/package/results.html?utmsource=brand-sitemedium=sticky-widget=1=11.04.2017=12.04.2017=%3C/SCript%3E%3CsvG/onLoad=prompt%28/OPENBUGBOUNTY/%29%3E=LLDP2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...