skyserver.sdss.org Cross Site Scripting vulnerability OBB-2845087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

skyserver.sdss.org XSS vulnerability

Open Bug Bounty ID: OBB-618180 Description| Value ---|--- Affected Website:| skyserver.sdss.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

skyserver.sdss.org XSS vulnerability

Vulnerable URL: http://skyserver.sdss.org/dr6/en/help/browser/description.asp?n=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...