Lucene search

K
openbugbountyHowardpottsOBB:1048667
HistoryDec 23, 2019 - 11:10 a.m.

cathedraledepapeete.com Cross Site Scripting vulnerability

2019-12-2311:10:00
howardpotts
www.openbugbounty.org
7

Security Researcher howardpotts Helped patch 160 vulnerabilities
Received 3 Coordinated Disclosure badges , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affectingcathedraledepapeete.com
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: cathedraledepapeete.com
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **howardpotts Helped patch 160 vulnerabilities
Received 3 Coordinated Disclosure badges **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAARRUlEQVR4nO2df0xTV/vAr1ihlAICbQUKA3RDQpgjG2Nuc9mii3OEGMxQN8YG/oiiUdc04sQQxliCC6JmbiFkYYtblm1/OGOIMc50bqmsc6Ks1opYfwxKqT8GKK5iKYX7/ePkvd/73nvO6aVysfI+n796zj3nPM95znP69J62z53BsiwDAAAAADIQ9qgVAAAAAKYtEGMAAAAAuYAYAwAAAMgFxBgAAABALiDGAAAAAHIBMQYAAACQi5CIMRkZGefPnycVAUBuQtPl5NAqNGcKTGMefYy5cOHC+Pj4M888gy0CgNyEpsvJoVVozhSY3gSIMT09PdHR0dhLQ0NDu3fvJhWl09raunz5clIx1OBPk2IcKfT09MTFxU20y0QlBiFlagjaYSadqXc5KetI0UrQXboluTHv3LmzZs0arVar1+s//PDD0dFRyboLdZh6B5O4C4J2sOD2dej4c6gR/H3M3bt36+vrSUXpPF4xJuhpAgJCx5Kh6XIUrdLS0vr7+7midEtyY5aXl/t8PqvVevLkSYvFUlNTMyk6Tw2C6ZOYYgcLHX8ONR7xWdmNGzccDsdrr72GLQKA3ISmywXUKiIiIugxHzx40NHR8eWXX+r1+vnz5+/bt+/QoUMTHU2hUGRmZvJfTCVBTB94VEiKMZ999llGRkZCQsJ77703NDTEMMzQ0FB6errH45kxY8Y333zDL+7bty86OnrPnj1z5syJi4srKyt78OABaeTW1talS5fOmjVLUFyxYsWePXtQ5fnz5yMiIpBchmE2btz41FNPUa5WVlbSu1dWVvJ1GBsbq6qqmjNnTlRU1MqVKwcGBlB9e3v7iy++GBkZqdVqV65c2dfXJ5g1yTiIkZGRdevWRUdHp6WlffTRR2NjYwzD9PX1vfHGG9HR0fPnz//+++9RS3Rvvnv3bq1Wm5SU9NVXX2Gli62HFUGSgm2PRGMXC6sApT1JGWy9wJKkvgGX6f79+xs3btRqtampqR9//DHqiJTcu3dvRkZGVFTU6tWrBwYGKisrtVptQkLCmjVr7t+/j/XA9vb2V155JTo6Wq/Xv/XWW5cuXaLMi2IfwVKSHIzkOQG14h/mSLckN2ZkZGRvb29UVBSqv3r1anJyMuc2UVFR8+bN279/P/0ETK/Xnzt3Dr34888/UeXPP/9M6cJvgDU11lZik/KnT3JI8VbF6hbcLhOrhH1nABCBY4zH47FarRaL5cyZM263e+fOnQzDxMbGdnV1qdVqr9dbWlrKL65YscLj8Zw5c+bs2bNnz57t6OhoaGggDU46KCssLDSZTKjy6NGj4+Pjx48fR0WTyVRUVES5WlBQQO9eUFDA16GhocFkMplMJofDkZyc3NnZieo7Ojo2bNhw8+ZNu92ekpKyZcsWwaxJxkHU1dUNDw/bbLbjx4+bzebm5maGYbZs2RITE9PZ2Xns2DH+u7/H4+nq6rLb7QcPHly0aBFWuth6WBEUKdj2pMUiKUBqT1IGWy+wJKlvwGXatm2b2+3u6Og4fvx4a2trU1MTp6TVam1ra7NarW63Oysrq7+/32aznT59uru7e9euXdywfA8sLCwsLy93Op1tbW2LFi1SKpWUeVHsI1hKrOYUz5GiFYd0S2IP3y5fvrx9+/bGxkbObbq6uk6cOHHw4EGujVaEeHUQ5eXlS5YsQbFHQHt7+5IlS8rLy+mTItlKYFI+WIcUb1WsbkHvMoFKYnHA/8NS6e7uZhjm3r17qGixWObOnctdUqvV/JaoiLo4nU5Uf/jw4by8PPTa6XSmp6dzXTwej1qtHhwcFBfdbrdKpfJ6vSzL5ufnG43GkpISNHhMTIzT6aRc9fl89O4+n48/R51O19HRQbfD1atXExMTBbOmGIdlWY1G4/F40Gur1Zqfn+/3+5VKJd8ys2fP5sbh7CBROlYEy7IkKdj2lMUiKUBqj1WGUs+fC6kNH/Ey+f1+tVp9/fp1VGxtbV24cCGn5N27d1F9W1tbWFjY8PAwKloslieffBK95rvc4OCgQqFAPsNHim4C+wiWUqw53XMCakXaehRtBXsN4XK55s6d++OPP7JUt3GJEFuAk1JfXx8fH79q1SqHw4EqHQ7HqlWr4uPj6+vrkW4kU1NsxddcvAexDimwElY3PtJ3GXaVBb0ADkXAIKRWq7k70+Tk5MHBwYBdlEplamoqep2VleV0OrnuFouFa3bixIn8/HzulpxfTEpKyszMtFgs2dnZbre7pqYmMzNzbGzMZDK9/vrrqamplKuzZs2id+eO5hiGGRoaGhwcXLBggXgWf/31144dOzo7O30+3/j4+Pj4uHTj3Llzp7+/Pz09HRXHx8cVCsXt27cZhuFbhj+O4GgioHSsCIZhSFJI7UmLRVIA2540OKleykT4YJfp9u3bPp8vIyODUwZtfmTP2NhY9DolJSUmJiYyMhIVk5OTuW+M+S4XFxdXXFy8cOHCxYsXJycn5+XlvfrqqxTdSPYRLCXJwSjbKqBWDAGKtoK9higuLjYYDKtXr2bIbsMwjF6vJ0kUEBUVVVVVVVFRsXbt2uzsbPRztezs7MLCwuvXr3MrQpoUxVaUgzuSA0vRLehdRlcJ4BM4xkwiM2fOTEpK4or0X5QVFBSYTKbr168XFhbGxsbm5uaazWbupIt+VUoDgWLiyqKiovXr1zc3NyuVSpfLtWzZMukz9Xq9YWFhZ8+e5TZ5WNjEfl4RUPpERWDb+3y+oBWQoowUJaVPBLtMD4PA5X744Ydz587Z7Xa32200Gl966aVdu3aRdJuQfSakeUCttm/fju1IsaT4oOzGjRs2m+2PP/4IqI/4cOyff/4hNb527VpNTY3ZbK6rq0M1dXV1jY2NmzdvrqurmzdvHmlSn3/+Obo06atM0S24XUbZNQAG+m2O+K6cu4OWeFZ25MgR7PGL3+/XaDTcQYegyLKsxWLJz89fvnz5sWPHWJZtamratm1bYmKi2+0OeFVKAw6dTme1WgWVt2/fVigUXNFqtXLnWvz7dJJxWJZVq9Xisx3+ccSRI0fEY0qXjhVBkYJtT1osigKkxcUqQ6nnz4XUho94mShnZZR14Ypil+NjtVpTUlJIuklcIJLmFA2laEU5KyO5hHhMv9/Pr6G4jfSzsoqKCrVabTQa+/v7+fX9/f0Gg0GtVldUVJAmhV4HtBVLPSvjO6Sgo1i3oHcZdpXhrIxE8DHG4/EoFAruZJMrolUvLi52uVx2uz03N7e2tpYbgTuENZvNOTk5XL2giNDpdDqdDnVxuVwxMTG5ubkSrwZswGlSX1+fn59vs9lcLteWLVvMZjPXvamp6e7duw6Ho6ioCE2cP2v6e1lFRcXChQvRJ7WGhoa6ujqWZYuKiviWob8xiaXfu3dPoVB0dXX5/X6SCJIUbHvKYmEVoLQnKUOq51uS1IZ/ZI9dpvXr1y9fvtzpdNrt9mefffbAgQMB14UrClyus7Nz2bJlJ0+e7O/vdzqd69evLywspOhGso94KcWaUzSUopX4mwa6JbGbS2Beluw20iktLe3u7iZd7e7uLi0tJU1Koq1YXIzBOqTgDQqrW3C7DLvKAnEAR/AxhmXZ2tpalUp18OBBfnHv3r1qtfrTTz/V6XSzZ89+//33ua9b+aNt3759165d3FCCIqKkpKS4uJgr5uXl8dvQr9Ib8DXx+/07duzQaDRKpbKoqIj7mGM2m/Py8pRKZWJiotFo5CbOzZpuHK/XazAYUlJSVCpVQUEB+szocrmWLl2qVqszMzMbGxspb0wk6Tt37uRsjhVBkoJtj0RjFwurAKU9SRlSPd+S2DYCs2CXyePxbNiwQaPRpKSk1NbWojcFiTFG4HI+n6+2tjYzMzM8PFyn05WWlt68eZOiP8U+gqUUa07RUIpWYil0S2I3l8AsnNuoVKq5c+fy3WbSIZmalWArFneWgHVIVvQGJSa4XUa6ZQko7n+TADEmCCTeM2ZmZp4+fZpUBKaGid7gT6cDgdB0OTm0CmJMcQQKTaaTQ05XpvQ7fz6XL1+mFAFAbkLT5eTQKjRnCvyPEPjHTufPn9+0adMUqDINGB0dfeedd27duiWxPSRaBwBgehM4xpSXl3M/DwfozJo1Kzw8nPTTUgGQaB0AgGlPgBgzMDBgs9kMBoP4Eimnd1pa2r///js52k0GlJzb4iTe/En19PTM4JGamlpVVYX+ukXJ/m0wGLg0NnQmJd2vlDzkFAtMdLFCbXEBmUhLS7tz586j1iIw4JChT4AY4/F4VCrVY53l9GFybqMERF6vd3h4+NixY7/99hv37y0S8fHxHo9HyuCTEmOk5DmHrOMAADwqHv1zMEOciIiIiIiIyMjIp59+urGxMYgs6FgmMaX8Y/0JAACA6c3EYgwpaTw2xTo2pbngbIc7m5Kejx2bvZzfPS4u7t1338U+g+AhjaVUKr1eb3B9BanFA6aUp1gPm+f8IZOcAwAAyMHEYgwpaTw2xTopZz4JifnYSdnLPR6PzWZDydKdTidqP4k5t4eGhmpra7HpzugIspojAiZvJ1mPkuf8YZKcAwAAyAL97zOC/8Njs3+T0kZhc+aT/uEsPR87Nnu5IFl6W1sb6RkEFGXY//7rGRpT8x/Cw8NLSkqQaIljirOaI6SklCdZjyHkOZ/EJOcAAACTxQT+g0nK/o1NsU7JmU9CSj52SvZyfrL0lJQUKc8gCIhKpbJarQzDmEymnTt3trS0cCpJQZzVHBEweTvFepSk4g+T5BwAAEAO5P3Of9LTdHOptq1Wq9VqtdlsKAYEB3qOGf95tOh3dFwxLCxMr9fr9fqysjKNRtPS0jKh8evq6sxm8+bNm69du8avFydvb2lpWbBggc/nMxqNW7duRfWyJjlHCQcD/kwOAADgYZhAjNHpdAzD9Pb2oqLD4eDqw8PD//77b1Ts6upKT0+PjY2Nj48X/4k9Pj5+eHiY+0m7y+WakLpJSUkqlWpwcFD/H/gPpJkoWq02Pj7+9OnTXI3ZbCbde1VXVzc0NIyMjEgfv6qqyuFw6HS63NxcLlfC2NjY0aNHBb9afu6558rKyqqqqr7++usjR46QrEfH6/XyV+eJJ57ANtu0aVNubm5iYqLD4aiqqpqQCAAAgAkRIMaEhYX5/X70eubMmcuWLTMajX19fRcvXqytreXq3377bYPB0Nvbi+pLSkoYhjEYDBs2bLhw4UJfX9/WrVtPnTrFMEx0dHReXp7RaLx169aVK1cEjzGXQmlp6ebNmy9evHjjxo09e/Z88skn9PYajcbr9V65cgUVBUGipqZm7dq1p06dGhgY+Omnn6qrq6urq7HjrF69OiYmhv+c85H/Bt0P+f1+/mMcExIS9u/fb7fbuT/NWCyWxMRE7mjx0qVLb7755q+//jowMNDb2/vFF1/k5uYyBOsFhL86hYWFWAt4PB673b53796EhAQpYwIAAAQP/esar9erVCq5b4ZJSeOxKdZJOfOvXr26ePFitVqdnZ194MABbFJ0Uj52lpBrXeIzCLDf1e/bty89PT08PDwnJ+fw4cP8QQSNv/vuu/T0dJ/Pxz3Tl09zczPLsocOHVqwYAHFpBJTymOtR8lz/pBJzgEAAORgBsuy9CD0wQcf2O32X375RZYQN70YGRnJysqqrq5et24dqc38+fO//fbbF154YXJF9/T05OTkQF4NAABCisAxZnR01Gq1Pv/881Oj0OPO77///vLLL0+9XIgxAACEIIFjDPBYADEGAIAQBPKVAQAAAHIB9zEAAACAXMB9DAAAACAXEGMAAAAAuYAYAwAAAMgFxBgAAABALiDGAAAAAHIBMQYAAACQC4gxAAAAgFxAjAEAAADkAmIMAAAAIBcQYwAAAAC5gBgDAAAAyAXEGAAAAEAuIMYAAAAAcgExBgAAAJALiDEAAACAXPwfoLe3StM8pqIAAAAASUVORK5CYII=)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: cathedraledepapeete.com  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 23 December, 2019 11:10 GMT
Vulnerability Verified: 23 December, 2019 11:26 GMT
Website Operator Notified: 23 December, 2019 11:26 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 23 December, 2019 11:26 GMT
Vulnerability Fixed: 16 January, 2020 06:32 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 22 January, 2020 11:10 GMT