iprev.santos.sp.gov.br Cross Site Scripting vulnerability OBB-2290511

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

egov1.santos.sp.gov.br XSS vulnerability

Vulnerable URL: https://egov1.santos.sp.gov.br/cgi-bin/do0104/ksearch.cgi?terms=d=Nome+de+Arquivo=5%22%3E%3Csvg/onload=alert%28/xssposed/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 09:55 GMT Vulnerability type:| XSS Vulnerability...