mindat.org Cross Site Scripting vulnerability OBB-2371492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mindat.org XSS vulnerability

Vulnerable URL: https://www.mindat.org/photoscroll.php?frmid=pscrollisvalid=1=pscroll=Search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 13.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 67898 VIP website status:| No Coordinate...

mindat.org XSS vulnerability

Vulnerable URL: http://www.mindat.org/gallery.php?loc=1%22--%3E%3Csvg/onload=;prompt%28/OPENBUGBOUNTY/%29;%3E Details: Description| Value ---|--- Patched:| Yes, at 10.06.2016 Latest check for patch:| 10.06.2016 11:20 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

mindat.org Open Redirect vulnerability

Open Bug Bounty ID: OBB-126992 Description| Value ---|--- Affected Website:| mindat.org Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet Vulnerable...

mindat.org XSS vulnerability

Vulnerable URL: http://www.mindat.org/search.php?search=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 01.02.2016 Latest check for patch:| 01.02.2016 03:00 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...