Lucene search

K
openbugbountyVighneshGuptaOBB:1062350
HistoryJan 07, 2020 - 9:42 a.m.

presskiosk.ru Cross Site Scripting vulnerability

2020-01-0709:42:00
VighneshGupta
www.openbugbounty.org
7

Security Researcher VighneshGupta Helped patch 131 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations , a holder of 3 badges for responsible and coordinated disclosure, found a security vulnerability affectingpresskiosk.ru
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: presskiosk.ru
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **VighneshGupta Helped patch 131 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 2 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, 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)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: presskiosk.ru  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 7 January, 2020 09:42 GMT
Vulnerability Verified: 7 January, 2020 09:55 GMT
Website Operator Notified: 7 January, 2020 09:55 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 7 January, 2020 09:55 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 6 April, 2020 09:42 GMT