Open Bug Bounty ID: OBB-1067511
Security Researcher Gh05tPT Helped patch 6900 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectingmcsoares.pt website and its users.
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:
      a. verified the vulnerability and confirmed its existence;
      b. notified the website operator about its existence.
Affected Website: |
mcsoares.pt |
Open Bug Bounty Program: |
Create your bounty program now. It’s open and free. |
Vulnerable Application: |
Custom Code |
Vulnerability Type: |
XSS (Cross Site Scripting) / CWE-79 |
CVSSv3 Score: |
6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N] |
Disclosure Standard: |
Coordinated Disclosure based on ISO 29147 guidelines |
Discovered and Reported by: |
**Gh05tPT Helped patch 6900 vulnerabilities |
Received 10 Coordinated Disclosure badges |
|
Received 48 recommendations ** |
|
Remediation Guide: |
OWASP XSS Prevention Cheat Sheet |
Export Vulnerability Data: |
Bugzilla Vulnerability Data |
JIRA Vulnerability Data [ Configuration ] |
|
Mantis Vulnerability Data |
|
Splunk Vulnerability Data |
|
XML Vulnerability Data [ XSD ] |
|
Vulnerable URL:
![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAAjCAIAAADNIk3yAAAACXBIWXMAAA7EAAAOxAGVKw4bAAAJ30lEQVR4nO2cX0hT/RvATzp16uYf3KaumZuUSIRKjGFhJBEhNmSSEphlkWiEiEmKeWFmoDYxyEC8CbSb7iRGhMR4L4YMMbNpw2yI2FhTZFsqR1tjbu/Fl9/h/M6/nTZXo/f5XJ3n7HnO9/nzPedxzxkeCQaDGAAAAABEgbg/7QAAAADw1wI9BgAAAIgW0GMAAACAaAE9BgAAAIgW0GMAAACAaAE9BgAAAIgWsdtjVCrV4uIimwhElZjKdkw5AwDALxGjPebTp0+BQKCkpIRRBKJKTGU7ppwBAOBXCdFjvn79KhaLGT/a2dkZHBxkEyPEYDBUV1ezicBhwVg1lG220nNsiWjA7QwfInf43r17ycnJk5OTkVwkPH5ztgHg0An/e8z29vbAwACbGCHQY34PjFWLqWxH7kx+fr7L5Qrb3O12j46Ozs7ONjQ0ROIGAPw3icVZ2cbGhs1mq6ioYBSBqBJT2T4sZ5KSksK2xXE8JSWlpKQkPj4+QjcA4D8Irx7z7NkzlUqVlZV1/fr1nZ0dDMN2dnaUSiWO40eOHJmcnCSLT58+FYvFw8PD2dnZmZmZjY2NP378QNd5//79uXPnxGLx0aNHr1y58vnzZ8blDAbDpUuXEhISKGJNTc3w8DA6ubi4mJSUhJzBMKylpaWzs5Nb4cSJE9zmZB/QjGJkZESlUqWmpl69etXtdnd2dkql0qysrFu3bu3t7SHNg4ODBw8eZGdnp6am1tXVud1ujkj39vZaWlqkUmleXt6jR48ODg6Q8pkzZ5KTk6VSaV1d3bdv3wgHBgcHpVJpbm7uixcvMAz7+fPn7du3xWJxfn7+w4cPkXnIxKJL0StCKSJj8p88eUKvIxnGiNjSwqbM5j/FmZCLbmxsXL58WSwWq1SqkZGRzMxM7P/HTeSyZmZmXrt2jdgDjLjdbnKKGNelV4r/5glZIwT9BuTWB4DYIXSPwXHcYrGYzea5uTmn09nd3Y1hWHp6+srKikgk8nq9DQ0NZLGmpgbH8bm5ufn5+fn5+YWFBb1ejy6l1Wpv3rxpt9tnZmbKy8uFQiHjimyDMq1WazQa0ck3b94EAoHp6WkkGo3GqqoqbgWdTsdtzhj4zMyMxWJxOp1FRUUul2tpaWl2dnZ9fb2npwep6fV6o9FoNBptNptcLl9eXuaItK2tzel0LiwsTE9PGwyGsbExDMMWFhaam5s3NzetVqtCoWhtbSUcWFlZsVqtExMT5eXlGIb19/fv7+8vLS1NT0+bTKbx8XGeiWWsCKWI9OTjOD7/P8h1JMMYEVta2JTZ/GcblLFdp7W1NTExcXV11Wg0vnz5km6IglpaWkL72W63E3VkJCsri5witnXpleK5eULWCGO5ATn0ASC2CHKyvr6OYdju7i4SzWZzQUEB8ZFIJCJrIhGZ2O12dH5qakqtVgeDQY/HIxAIvF4vfRW73a5UKtExjuMikcjj8dBFp9OZkpKCrqDRaDo6Ourr69GKaWlpPp+PW8Fut3Ob0wPf3t5G4szMTFxc3P7+PpGH48ePo2OZTLawsEC2ZYvU7/eLRKK1tTUkGgyGsrIyis7q6mpOTg7hAJEHhEQiwXEcHVssFo1Gw51Yciz0igRpRSRnm82KbMIRET0tbMps/lOcCbmo3+8XCoXE+ampqYyMDIotZT/PzMwQ+5kje8icbV16pfhvHooJY7YZb0COmgJATCEI2YREIhExapDL5R6PJ6SJUCjMy8tDx0VFRXa7HcOwzMzM2trasrKyCxcuyOVytVp9/vx54rJmsxkdv3v3TqPRoCkHRczNzS0sLDSbzSdPnnQ6nb29vYWFhQcHB0aj8eLFiwkJCdwKeXl53Ob0wNPT09GxQqFIS0tLTk4mHEavkXd2djweT3FxMdmQLdKtrS2fz6dSqYjMoCfFx48fu7q6lpeXfT5fIBAIBAKEA0QeMAz7/v27y+VSKpVIDAQCAoGAO7HcFaFDSX5IK7aIGNPCpszmP8WZkNfZ2toKBALk84wxkvezQqHgs5+518VolcL4bR4KbNlmuwF51hQA/iyhe8wh8urVqw8fPlitVqfT2dHRcfbs2efPn2MYFh8fn5ubi3S4f1FWVVVlNBrX1ta0Wm16enppaanJZCJPurgVQpqHB/1tMFukjOh0uqampvHxcaFQ6HA4KisrGdW8Xm9cXNz8/DxqLRiGxcXFhbEcB4f7izL+L8kZ/Y+pn7cBABAm3F9z6AMxNH9g/IhxVvb69WvGb/EWi0WhUFBO+v1+iURCjCMoYjAYNJvNGo2murr67du3wWBwbGysra0tJyfH6XTyUQhpzidwiiiTySwWC0cOiUgZhy1bW1sCgYCsTJ/wEIhEIsoAimM5srdsFaHMoMjZZrPiPyujpIXPqJDwn+4Mz1nZ+vo6Os82K+MoKyN8ZmWUSvHfPOSTIbNNtuV5lwHAHyf8HoPjuEAgsNlsFBHt/traWofDYbVaS0tL+/r6gsHg8vJyZWXlP//843K57HZ7U1OTVqslrozG8SaT6dSpU8RJioiQyWQymQzpOxyOtLS00tJS/grcnxJvBfg/JgYGBjQazdLSksPhaG1tNZlMHJE2NTVVV1fb7Xar1Xr69OnR0VHk0tjY2Pb2ts1m0+l0HD3mzp07ZWVl6O99vV7f39/PkVhyLIwVoRSRkm02q93dXYFAsLKy4vf72SJiTAubMqP/FGd4LlpbW6vT6dbX161Wa3Fx8eH2GLZ1I+kxIWvE3WMYawoAMUX4PSYYDPb19aWkpExMTJDFkZERkUg0NDQkk8kyMjJu3LiB3nb6fL6+vr7CwsLExESZTNbQ0LC5uUlZ5f79+z09PcT1KSKivr6+traWENVqNUWHW4HjU/4PI7Lo9/u7urokEolQKNTpdC6XiyNSHMebm5slEolCoejr60NPTJPJpFarhUJhTk5OR0cHR4/xer3t7e0KhSIlJaWqqgr9Tc24HD0WekUoRaRkG1np9Xq6VXd3N1F3xogY08KmzOg/vfR8Ft3c3NRqtSKRSKlUDg0NHXqPYVw37B7Dp0YcPYajpgAQO4ToMWHA+HDkSWFh4ezsLJsIhAfPisRUtiN3ZmVlRSaTHZY/0eZX75pI7jIA+J381nf+Ifny5QuHCESVmMp25M5YLJaCgoJDcQYAgLCJrR4DAJHw+PFjuVxeXV29trbW09PT29vL01AqlTKeX1tbg39JCQCRAD0G+HuoqKhob2+/e/fusWPH2traGhsbeRpaLBbG89BgACBCjgSDwT/tAwAAAPB3Eov/dxkAAAD4O4AeAwAAAEQL6DEAAABAtIAeAwAAAEQL6DEAAABAtIAeAwAAAEQL6DEAAABAtIAeAwAAAEQL6DEAAABAtIAeAwAAAESLfwHLDj+m47UahwAAAABJRU5ErkJggg==)
HTTP POST data:
![](data:image/png;base64, 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)
Research’s Comment:
![](data:image/png;base64, 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)
Mirror: Click here to view the mirror
Coordinated Disclosure Timeline
Vulnerability Reported: |
14 January, 2020 12:05 GMT |
Vulnerability Verified: |
15 January, 2020 12:42 GMT |
Website Operator Notified: |
15 January, 2020 12:42 GMT |
a. Using the ISO 29147 guidelines |
![](/images/done.png) |
— |
— |
b. Using publicly available security contacts |
![](/images/done.png) |
c. Using Open Bug Bounty notification framework |
![](/images/done.png) |
d. Using security contacts provided by the researcher |
![](/images/done.png) |
Public Report Published |
|
[without any technical details]: |
15 January, 2020 12:42 GMT |
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. |
13 April, 2020 12:05 GMT |
— |
— |