punjablabour.gov.pk XSS vulnerability

Open Bug Bounty ID: OBB-465716 Description| Value ---|--- Affected Website:| punjablabour.gov.pk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

punjablabour.gov.pk XSS vulnerability

Vulnerable URL: http://www.punjablabour.gov.pk/search/?keyword=%3C%2Fscript%3E%22%3E%3Cscript%3Eprompt%28%2FOPENBUGBOUNTY%2F%29%3C%2Fscript%3E= Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 09:38 GMT Vulnerability type:| XSS Vulnerability...

punjablabour.gov.pk XSS vulnerability

Vulnerable URL: http://www.punjablabour.gov.pk/joblisting/category/44%22%3E%3Cimg%20src=x%20onerror=prompt%22OPENBUGBOUNTY%22;%3E?keywords=+%22%3E%3Cimg%20src=x%20onerror=prompt%22OPENBUGBOUNTY%22;%3Etypeid=id=id=date=date=by=&button2.x;=44&button2.y;=23 Details: Description| Value ---|---...