penn.museum Cross Site Scripting vulnerability OBB-2345671

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

penn.museum Cross Site Scripting vulnerability OBB-1475663

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

penn.museum Cross Site Scripting vulnerability OBB-1453250

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

penn.museum Cross Site Scripting vulnerability OBB-1444138

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

penn.museum Cross Site Scripting vulnerability OBB-1214233

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

penn.museum XSS vulnerability

Vulnerable URL: http://www.penn.museum/cgi/cuneiform.php/"'--!confirmOPENBUGBOUNTY...

penn.museum XSS vulnerability

Vulnerable URL: http://www.penn.museum/cgi/cuneiform.php?fullname=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=dcb=inscribe Details: Description| Value ---|--- Patched:| Yes, at 14.12.2015 Latest check for patch:| 14.12.2015 14:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...