mimg.ucla.edu Cross Site Scripting vulnerability OBB-2275256

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

luskin.ucla.edu Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1012593 Security Researcher geeknik Helped patch 8815 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting luskin.ucla.edu website an...

gsa.search.ucla.edu XSS vulnerability

Vulnerable URL: http://gsa.search.ucla.edu/search?site=UCLA=UCLA%22%27%20Style=position:fixed;top:0;left:0;font-size:999px;%20Onmouseenter=confirmOPENBUGBOUNTY%20//=UCLA=xmlnodtd=1=abcd Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS...

kb.ucla.edu XSS vulnerability

Vulnerable URL: https://kb.ucla.edu/articles/search?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 22:03 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

adminpolicies.ucla.edu XSS vulnerability

Open Bug Bounty ID: OBB-92397 Description| Value ---|--- Affected Website:| adminpolicies.ucla.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...