walgreens.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1168506 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Walgreens Mobile App Leaks Prescription Data

Popular pharmacy chain Walgreens is warning that a bug in its official mobile app may have exposed sensitive data, including customers’ full names and information on prescriptions for medications they are taking. The security issue stemmed from an “error” in the personal secure messaging feature ...

walgreensbootsalliance.com Cross Site Scripting vulnerability

Security Researcher RAndo Helped patch 7 vulnerabilities Received 0 Coordinated Disclosure badges , found a security vulnerability affecting walgreensbootsalliance.com website and its users. Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open...

walgreens.com XSS vulnerability

Open Bug Bounty ID: OBB-429731 Description| Value ---|--- Affected Website:| walgreens.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

walgreens.com XSS vulnerability

Vulnerable URL: https://www.walgreens.com/topic/promotion/walgreens-online-deals.jsp=''.sub.call.call$='constructor'.getOwnPropertyDescriptor.proto,$.value,0,'alert'XSSPOSED''" Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 02.01.2018 Vulnerability...

walgreens.com XSS vulnerability

Vulnerable URL: https://www.walgreens.com/search/results.jsp?Ntt=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 28.09.2017 Latest check for patch:| 28.09.2017 17:18 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

walgreens.com XSS vulnerability

Vulnerable URL: https://www.walgreens.com/steps/articles/articles.jsp?plckTag=sunburn Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1149 VIP website status:| Yes Check walgreens.com SSL connection:| Grade: A+...

photo.walgreens.com XSS vulnerability

Vulnerable URL: http://photo.walgreens.com/walgreens/storepage/storePageId=Main?ban="-alert'OPENBUGBOUNTY'-" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

walgreens.com XSS vulnerability

Vulnerable URL: http://www.walgreens.com/search/results.jsp?Ntt=%3Cimg+src=x+onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 04.10.2017 Latest check for patch:| 04.10.2017 13:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 79...