collection.legacy.uvic.ca Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1133022 Security Researcher KhanJanny Helped patch 3072 vulnerabilities Received 9 Coordinated Disclosure badges Received 38 recommendations , a holder of 9 badges for responsible and coordinated disclosure, found a security vulnerability affecting collection.legacy.uvic.c...

finearts.uvic.ca XSS vulnerability

Vulnerable URL: https://finearts.uvic.ca/visualarts/contacts/facultystaff/lgammon/gallery/0/?bg=xss" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

webapp.library.uvic.ca XSS vulnerability

Vulnerable URL: http://webapp.library.uvic.ca/databases/details.php?id=730=letter:P...

uvic.mua.hrdepartment.com XSS vulnerability

Vulnerable URL: https://uvic.mua.hrdepartment.com/hr/ats/JobSearch/viewAll/"onclick=alert/OPENBUGBOUNTY/CLICK HERE Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

uvic.ca XSS vulnerability

Vulnerable URL: http://www.uvic.ca/library/search.php?q=%22%3E%3Cscript+src%3Dhttps%3A%2F%2Fopenbugbounty.org%2F1.js%3E=4=1=true Details: Description| Value ---|--- Patched:| Yes, at 12.05.2017 Latest check for patch:| 12.05.2017 20:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

uvic.ca XSS vulnerability

Vulnerable URL: https://www.uvic.ca/search/site-search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E=web.uvic.ca%2Fcalendar2016-01=4=1=true Details: Description| Value ---|--- Patched:| Yes, at 16.05.2017 Latest check for patch:| 16.05.2017 16:10 GMT Vulnerability type:| XSS...

Unfixed XSS vulnerability at www.uvicbookstore.ca

Security researcher CCC, has submitted on 16/02/2008 a cross-site-scripting XSS vulnerability affecting www.uvicbookstore.ca, which at the time of submission ranked 12796 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is current...