Lucene search

K
openbugbountyHaxmovOBB:1084580
HistoryFeb 04, 2020 - 11:47 p.m.

multicursos.com.br Cross Site Scripting vulnerability

2020-02-0423:47:00
haxmov
www.openbugbounty.org
5

Open Bug Bounty ID: OBB-1084580

Security Researcher haxmov Helped patch 543 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affectingmulticursos.com.br
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: multicursos.com.br
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **haxmov Helped patch 543 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 3 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

Screenshot: multicursos.com.br  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 4 February, 2020 23:47 GMT
Vulnerability Verified: 5 February, 2020 00:03 GMT
Website Operator Notified: 5 February, 2020 00:03 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 5 February, 2020 00:03 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 4 May, 2020 23:47 GMT