oag-kaltenweide.de Improper Access Control vulnerability OBB-3776944

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

oag-helgoland.de Cross Site Scripting vulnerability OBB-3330898

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

timetables.oag.com XSS vulnerability

Vulnerable URL: http://timetables.oag.com/saaroutemapper/LetterSearch.asp?ControlName=Dep〈=EN=1"...