Open Bug Bounty ID: OBB-1043337
Security Researcher Vodoo Helped patch 6 vulnerabilities
Received 0 Coordinated Disclosure badges , found a security vulnerability affectinggov.ph website and its users.
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:
      a. verified the vulnerability and confirmed its existence;
      b. notified the website operator about its existence.
Affected Website: |
gov.ph |
Open Bug Bounty Program: |
Create your bounty program now. It’s open and free. |
Vulnerable Application: |
Custom Code |
Vulnerability Type: |
XSS (Cross Site Scripting) / CWE-79 |
CVSSv3 Score: |
6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
Disclosure Standard: |
Coordinated Disclosure based on ISO 29147 guidelines |
Discovered and Reported by: |
**Vodoo Helped patch 6 vulnerabilities |
Received 0 Coordinated Disclosure badges ** |
|
Remediation Guide: |
OWASP XSS Prevention Cheat Sheet |
Export Vulnerability Data: |
Bugzilla Vulnerability Data |
JIRA Vulnerability Data [ Configuration ] |
|
Mantis Vulnerability Data |
|
Splunk Vulnerability Data |
|
XML Vulnerability Data [ XSD ] |
|
Vulnerable URL:
![](data:image/png;base64, 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)
Screenshot: ![gov.ph vulnerability](/twimages/screen-1043337.jpg)
Mirror: Click here to view the mirror
Coordinated Disclosure Timeline
Vulnerability Reported: |
19 December, 2019 03:02 GMT |
Vulnerability Verified: |
19 December, 2019 03:15 GMT |
Website Operator Notified: |
19 December, 2019 03:15 GMT |
a. Using the ISO 29147 guidelines |
![](/images/done.png) |
— |
— |
b. Using publicly available security contacts |
![](/images/done.png) |
c. Using Open Bug Bounty notification framework |
![](/images/done.png) |
d. Using security contacts provided by the researcher |
![](/images/done.png) |
Public Report Published |
|
[without any technical details]: |
19 December, 2019 03:15 GMT |
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. |
18 March, 2020 03:02 GMT |
— |
— |