Lucene search

K
openbugbountyGh05tPTOBB:1118027
HistoryMar 14, 2020 - 12:53 a.m.

autoparts.ge Cross Site Scripting vulnerability

2020-03-1400:53:00
Gh05tPT
www.openbugbounty.org
9

Open Bug Bounty ID: OBB-1118027

Security Researcher Gh05tPT Helped patch 6884 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affectingautoparts.ge
website and its users.

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:

&nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence;
&nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence.

Affected Website: autoparts.ge
Open Bug Bounty Program: Create your bounty program now. It’s open and free.
Vulnerable Application: Custom Code
Vulnerability Type: XSS (Cross Site Scripting) / CWE-79
CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N]
Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines
Discovered and Reported by: **Gh05tPT Helped patch 6884 vulnerabilities
Received 10 Coordinated Disclosure badges
Received 48 recommendations **
Remediation Guide: OWASP XSS Prevention Cheat Sheet
Export Vulnerability Data: Bugzilla Vulnerability Data
JIRA Vulnerability Data [ Configuration ]
Mantis Vulnerability Data
Splunk Vulnerability Data
XML Vulnerability Data [ XSD ]

Vulnerable URL:

![](data:image/png;base64, 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)

HTTP POST data:

![](data:image/png;base64, iVBORw0KGgoAAAANSUhEUgAAAiEAAAA3CAIAAABVZQ1/AAAACXBIWXMAAA7EAAAOxAGVKw4bAAAUyUlEQVR4nO2df0wT5xvAz1qwlB8WLJUfFQFJqYQxJOpwI4axxRFGSJc4xxhDdMYhYegW5pAwx5AgY/jNxhZCnC5ojDHLQgwxhBndSMMI1trVrnOFIBaslSFgwcpOQO77xxsvt/vVa6HC5vP56/rec8/7PM/73j299+7edxlBEBgAAAAAeAHRYhsAAAAA/GeBHAMAAAB4C8gxAAAAgLeAHAMAAAB4C8gxAAAAgLeAHAMAAAB4CzdyTExMzPXr171nCiAQaAiAxvXr1/ft27fYVgCueQZbSmiO+f333+fm5p5//nmvWgO4BBoCYFJYWBgdHb3YVgCueQZbSmiOaWtry8nJGRwcDAwMFK59cHAwODjYI8Nca3bLEgzD7t+/v2vXrtDQ0MjIyE8++WRmZsYDJR5D1jXPmKCGwDDswYMH+/fvX7t2rZ+fX3x8/BdffPH48WMkc+rUqfXr1/v5+a1fv/6bb76hmbGMwpo1aw4dOjQzM4MxQkqVXL58eUxMzJEjR1AVy9jw2COyOs/agicOGHcoeOJAM8arcfDY64mJiaNHj6LtsbExk8l04MAB/oBQD1lAS1j58MMP/fz8Tp06tVAKqfC06YK4wHP6uIT/7Ka11LMCIYzNmzdfvHiRIAgcxwUeQhCE1WqVyWTC5d3SHBAQ4NYhOTk5eXl5NpvNYrGkpaWVl5d7oMRjyLrmGROyIbZv367RaCwWy8jIyKVLl9LT03U6HUEQx48fVyqVFy5cGB0d7ezsjIuLq66uppmB4ziO41NTUyaTKTU1tbKykmCElCZpNBo3b96MVKFCi8Uik8nwJ3jsEbU6Dw7kigPBGwqeONCM8WocPPaaaaHLgLisa/6NiBgdHRWJREajcXZ2dkEUUnHZpt7TLwT+s/tpXnCWDoJyjN1ul8lk09PT7mpfOjlmampKqVQ6nU70U6fTxcXFPc0mt9lsKSkpaGPz5s2eKSEbYmpqSiwWOxwOpoxSqURJCGEwGKRSKek40+Wuri61Ws3cxSqZkJBAFVjAxvWsLXjiQPCGgicOBO8VnFjQOCx4juEJyFPr7V6tyK02XVj9QoAcw0TQWFlbW9u2bdt8fHyoAz6BgYHHjh2LiYkJDg5+5513JiYmkPCdO3dee+21wMDA+Pj4s2fPkkoePXr03nvvBQYGrl279rPPPkP377du3fL39//tt98wDBsbGwsODv7ll1+oVaOKvvzyy9WrVwcHB+/cufPvv/8m93799dcxMTGrVq169913kQFc8n5+frdv3/b390cH9vf3R0REMD29evXqli1b/Pz8QkND33zzzTt37vB4imHY3bt3X3/99cDAwJiYmGPHjvHcJkdGRl67dg1tXLlyBRX+9NNP/JGnCZANMTc3h2GYWCymyU9MTNhstvT0dLJkw4YNnZ2dPFVIJBIcx/nNICVnZ2cFmjofhKhCMlxxwNwPxULFAeOwn9m1mDKs5wjqgUePHg0NDQ0PDz958uTExER0dLTT6Vy2bBltPIqnY1APYeqkDQ9y9XmXHX5sbIys6H//+x+tFgzDHj58+P7774eGhq5Zs+bzzz+n+ohq9Pf3f+utt8bGxj7++OPQ0NBVq1bt2rXr4cOHmLA2ZV4TuILPGlge/ayWY25e8Z5BhOYY9AyAitPpNJlM3d3dOp1uaGiooqIClZeUlAQFBd24caO9vZ0a8erqajQo0dHRodVqm5ubMQyLiYmpqKhAA5SHDx/Oysp6+eWXmRXpdDq9Xq/X6w0GQ319PVluNBqRAXa7vby8nF+epLe3t6ysrKGhgempwWDYu3fv8PCw2WxWKpUlJSU8niJnfX19+/v7L126dPr0abI8lAFrYAsLC1955RWUe2hcvXr1lVdeKSwspBaSDeHv75+VlZWbm/vrr7+i04/0XSKR+Pj4UI/atGkTmVxpTExMVFVVZWVlse6lcu/evcrKSo1GwyXA44u78KuiRoYrDpiboVjAOHDZz9q1aLCeI8gXi8ViNptbWlrS0tJWrlxpsVjQCF5+fj5VA1dAmIfQdNIs4Tm7WTs8yapVq8iK3njjDWYtpaWldrvdYDB0dHS0tbU1NTWRNRqNxq6uLqPRaLfb1Wr16OioyWTq6emxWq3IAJdtynVN4Ao+zTx+/VyWu3XFexZxeafjdDoDAgLGx8eJfz5UwDBscnISyXR1dcXGxhIEMTs7K5FIhoaGUHlrayt55yiXy8lbTjSojbanp6fVanVVVZVcLh8eHqbVjiqiKty4cSPTgO7ubmQAlzyJzWaLjY09d+4c4erWtb+/PywsjMtT0tmBgQGmszYGXLGtra0NCQnZsWNHX18fKuzr69uxY0dISEhtbS31Jp3aEARBTE5OlpeXq1QqsVgcFxdXVVU1Ozvr8mYcuSN/gq+vb15eHutQA1UyJCREIpEUFRVRh+xpwwKsvgiHWjuXKtbIsMaB6Y7wOBCMkSi34iAkFKhrMY1kPUeQAWS7s1pIVSIkIEydzL1cZzdrh2e1jVnL7OxsQEAAqaGtrS01NZWUJIf4urq6RCLR1NQU+tnd3R0XF8f0lFkv6zWBBjX4PEGgwWW5W1e8Z3OszHWOaW1tzcjIQNvU3kO7HqHI2u12iURClt+4cQOVj4+PU0/pkJAQhUJBil26dAnDsMbGRmbtVquVphAdyGUAlzxJamoqWRGzyQ0Gw6uvvhoREYGMlMlkXBUhZ319fZnOusv4+LhGoxGLxeinWCzWaDTMIXVqQ1DBcby7uxs9srbZbFT3mVitVqlUitJeS0tLWFgYeSYzPSUl7XY78/kt69AzzReCIOQUuEqYtbOq4ooMMw4EQfCHgicOBOOC60EcmPYzuxatIq5zhPXCxP/EiDUg/Ifw7KWe3UI6PNdVgqmhr6+PNdfSQkr+dNmmXEpcBh/Bo5/LcreueM9mjnE9VsY6UOYuOI6LRCK9Xm80Go1Go8lkMhqN5N7h4WGRSDQ8PDzPWlxy9+5dk8n0wQcfcAloNJqtW7dqtVqj0dje3u5xRQLHyjAMu3nzZklJiVarra6uRiXV1dVarba4uPjmzZtUSa6GWLFixZYtWxobG3/44Qc0RkG+g4u4du0addhEJBJFRkZGRkbu3LlTLpefOHGCyzZSMjw8fPny5S69ZvqCYZiRAleJQFVckWHGAcMwl6HwXhxY7XfZtfjPEQ+gBeQ/gJDuzYrA89pj/UwWvDX/vbjIMY8fP75w4YLwHKNQKDAMu337NvrZ19eHNsLDw6VS6fj4eOQTwsPD0a6JiYmysrKzZ882Nzf/+eefTJ04jlMVRkVF8dvAI69QKMxmM9eB9+7ds9vtn3766bp16yIjIyUSiUtnRSLR4OAg+mmxWMhdRgasGvbt25ecnBwWFtbX13fo0CFUeOjQob6+PoVCkZycTH4SzGwIWr/HcXx2dnblypVKpVKr1ZLlf/zxx9atW7lcqKysrK+vf/ToEb+nQmD1BcOwSApcJRiGrV279sGDB/yqWCPDGgcMw9wKxQLGgdV+IV2L5xxxC66AzB+eDi9cg6+v761bt0gNbn2Q6G73Rgg/r3n0c1nuwRXvmYP/Nker1SYmJpI/XY6VEQSh0Wi2b99us9nMZnNycjJZXlRUlJqaajab7XZ7fX09+dZ5cXHxjh07CIKoqalJT09HheR4NxozpSqsqqriMYBLnoQ6kj45OSkWiy0WCzkAolAompqaHA5HX1+fRqPhHysjnnyLYLVazWZzUlKSu2Nl+fn5VquVa6/Vas3Pz0fbtIawWCwKheL48eN2u93hcKC9tbW1xD9f8NdqtQkJCTU1NVSdtLv1hISE5uZm5i4hj3ao/vL7IgSyaVyqIiPDEweCNxQ8cSCEjURRjaG1O6v9zK5FMHog6znCaoDT6RSLxehhz9DQEDlcwxMQ6iGejZUR3B2e9oCKa6yMIIg9e/bk5OQMDQ2ZzeaUlBQ0cC1wrIxwp02pR7EGn9U8Hv2slhPuXPGoLfXs4CLHlJWVVVRUkD+F5BibzbZt27aAgACVStXQ0EDthQcOHFAqlVKpNCsrCz090+v1AQEB6IkZjuPR0dGnT59mdve6ujqFQiGTyQoKCtC4OU+OYZVn2okoLy+XSqUtLS3op1ar3bhxo0QiCQsL++ijj1zmmOHh4ezs7ICAgOjo6Lq6Oi99DEQwGoIgiPb29vT09KCgIKlUmpSUdPz4cXJXS0uLWq2WSCQqlYr2lIt5Xp05cyY6Onp6enqeOWaeeDxUzRMHgjsUPHEg5p1jWGF2LVRO7YGs5wiXAVVVVehAHMclEgn5cgFPQMhDPM4xrB2eq+dwZce9e/fK5XKlUsn1ggZPjiEEtyn1KNbgcwWWSz+r5YQ7VzxaSz0jLCMIgucuJz4+/vTp0y+88MJTuadiYXBwMDExkRxFWXD5BaS3t3fr1q1//fWXN5QvekMAS5n9+/ebzebLly8/zUq92uH/qyxKSy0uLB+vUent7X06dvwHMBqNsbGxXlIODQHw0NDQ8PQfKXu1w/9XWZSWWlxg/Zh5ceTIkZMnT967d+/KlSsVFRVFRUWLbdE/mJmZefvtt9E/Teq2EGAFgX8RPj4+mzZtegoVLfEOv/R5ai21dIAcMy/S09ObmpqUSmV+fn5paenOnTsX26J/4OPj4+vrW1ZWRtt2CawgALCyxDs8sBThf1yDXtOiEh0djXbhOJ6bm8vzOJRVYHR0ND8/Xy6XR0RElJeXM+fZzMzMJF/vYYUmMDAwkJOTI5PJFArFnj17aB/oMe3PzMxEuywWS2ZmZlBQkEKh2L17N8+XfUwveHyfnJwMCwuzWCys2litdRkTlxp44mMwGNDHYrRtfmpqakpKSpA7paWlUVFR6BFoXV0d9SNE8umoWq2mPX2lxlypVFL9Yn5SjhCJRNHR0dXV1agKD7orAABLDdf3MQFPJjbHcbympiYpKQnDsEePHmVmZvK8d88lUFBQMDc3ZzQaf/75587OTuoXdhiG9fb2GgyGgoICLrVMgezsbLVabbFYenp6RkdHi4uLeezHcbytrQ2VZ2VlKZVKi8ViMBhwHGe962f1gt/3xsbG/Pz8+Ph41r2s1vLHRIgGnviEhIQ4nU7mNj/k9567d+8eGhq6ePHi0NBQU1NTR0eHwWBAMt99911lZWVDQ4PNZmtubm5sbDxy5AipIYAyH357ezuPX6Sk0+k8f/78hQsXamtrMQxjnTlfiPEAACwh+FPQ8PAw+cefIIiEhITW1laCIKxWa01NDc9rnawCTqdTJBJRZyVSqVTUo4qLi8k1PFihCYyMjFDnGjEajUqlkmYG1zQbX331FTm1kclkoh3I4wWP75OTk4mJiaRaGqzWuoyJSw1UAWYA3XoNFyFkBQHi3zBzPgAAi44bgw86nU4ul1NHcoR8OsDzyQXt8uFwOEJCQpjTYvILJCQkfPvttwRBTE1NFRUV5ebm0gyQSqWlpaUKhUKhUBw4cIA539T09PTBgwcLCgoEesFTWFtbS35qwwrTWv6YCNFA7mKNj8Ac09HRQW43Nzejr2LRV3usi2c4HA4Mw2jDejqdjivH6PV6cpSV3yS9Xk/NssyAUE0FAGCJ40aOKS4uLi0tpZYsbI5paGjgudBzCQwMDAQFBUkkErFYrFaraRdENNxfUVExMjLS39+fmJjY0NBAFWhtbRWLxenp6TyLAArMMU6nUy6Xx8bGRkREVFRUsC4CyLTW3RzD4y9rfFzmGJ1Ol5GRQX1Ok5WVdebMGbSdk5OTnZ3d1dVFC6xbsxM6HI7s7Ozi4mKXJo2MjGRmZh48eJCqihaQsLCwjIwMvV7PVTsAAEsHoTkGx3GZTGYwGKiFC5tjYmNjjUYjz0WWVaC0tDQlJUWn0128eFGpVJ44cYJmdk9PD/nz/PnztDUop6am0HwbPC8aCMwxDQ0NGo1mdHQUJTPWaaSZ1rqbY3j8ZY0PzwWddap8ISsIcMWEWim2eDPnAwCwdBCaY86dO5eUlEQrXMAcQ05cz3WRZRWYnp6WSqUmkwn9PHv2LG21GBoWi4X1xar29na0ELIQL7gKVSoVuYxEW1sb0xJWa93KMTz+cgWQJ8ewTpUvZAUBYunNnA8AwNJE6PcxLS0tu3fv9s5rBxiGYY2NjWg1TLcExsfHp6enn3vuOfQzOTnZZrPxV4QWo52Zmbl69SpZGBsba7fbPbH7Cffv3x8YGFizZg36qVKpmAo9sFa4BpcBZMI6Vb6QFQSwpTdzPgAASxNBOebOnTudnZ15eXnzrEwul09NTZGLbNtsNjQzNoZhnZ2dhYWFoaGhKSkpk5OTzDVXWAVWr14tFovJSyRzqvDLly9v2LCB/Hnjxg0kMDc39+KLL96/fx+VC1kygB+pVDo3N0ed+pupkNVanpgw4fHXZQCZMKfKF7iCALbEZs4HAGDpIuRmp66uTqPRMMvdHSsjCCIzMzM/P99ut/f19aWlpZEv2pJrEvf09AQFBTHXJ+YSKCkpycjIGBgYMBgMKpWK9lqXw+GQy+WHDx8eHR01GAzUxyTZ2dm5ubk2m81oNCYkJDQ1NQn3grVQo9FkZmZarVaTyZSQkPD9998zVbFayxUTVrj85YpPf38/OdZE3ab5gqbKF76CALHEZs4HAGBpIijHqNXq8+fPM8tdzgbPLBkZGcnLywsJCeH6pp02Sz9rpdSLDo7jJSUlCoUiKiqKfGeMeqxer09LSwsICIiNja2vr6dakpubK5PJlEolz8VReOHo6ChyLSoqqq6ujlWM1VrWmPB82cPUwBOfH3/8kXyQRt1mxa0VBIilNHM+AABLk4WcnEPgJ35PQZvHxy6sC4tuCVqSB717Rt3mQqVSUV/DAwAAmCcu5vZ3F7dWTvWqNo+PXVgX5qNw/pasWLHizJkzL730Em2bC1hBAACAhcXFGmVuMTY25nA41q1bt+jaPD52YV1YUpYAAAA8fRYyxwAAAAAAFVg/BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAbwE5BgAAAPAWkGMAAAAAb/F/cs+J1avO0MsAAAAASUVORK5CYII=)

Research’s Comment:

![](data:image/png;base64, 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)

Screenshot: autoparts.ge  vulnerability

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability Reported: 14 March, 2020 00:53 GMT
Vulnerability Verified: 14 March, 2020 01:02 GMT
Website Operator Notified: 14 March, 2020 01:02 GMT
a. Using the ISO 29147 guidelines
b. Using publicly available security contacts
c. Using Open Bug Bounty notification framework
d. Using security contacts provided by the researcher
Public Report Published
[without any technical details]: 14 March, 2020 01:02 GMT
Public Disclosure: A security researcher can delete the report before public disclosure, afterwards the report cannot be deleted or modified anymore. The researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability. 12 June, 2020 00:53 GMT