Report Email Alerts Open Bug Bounty: 107349 coordinated disclosures
Full Disclosure: 32317 vulnerabilities
Total Vulnerabilities Fixed: 36316
116296 vulnerable websites, 12675 VIP websites
2789 security researchers, 3871 notification subscribers

st-andrews.ac.uk Security Vulnerability

On the 06.12.2015 security researcher Spam404 Twitter: @Spam404Online
Approved XSS vulnerabilities: 21980
Approved XSS vulnerabilities on VIP websites: 1556
disclosed XSS vulnerability affecting st-andrews.ac.uk website.

On the 06.12.2015 security researcher Spam404 discovered and reported XSS vulnerability affecting st-andrews.ac.uk

On our side, we have notified website owner via all reasonable communication channels about the vulnerability, so it can be patched as quickly as possible.

Currently the vulnerability is patched and does not represent any security risk for the website or its visitors.

Vulnerability Details

Vulnerable URL:

http://www.st-andrews.ac.uk/~qoi/photos.htm?folder=exhibit2011&img=">< svg/onload=prompt(/XSSPOSED/)>

Other details:

Patched:Yes, at 28.06.2016
Latest check for patch:28.06.2016 06:31 GMT
Vulnerability type:XSS
Vulnerability status:Publicly disclosed
Alexa Rank31408
Google Pagerank7
VIP website status:Yes
Check st-andrews.ac.uk for malware:Click here
Check st-andrews.ac.uk SSL connection:Click here (Grade: A+) Refresh Results

Screenshot: st-andrews.ac.uk XSS vulnerability

Mirror: Click here to view the mirror


Notification & Disclosure Timeline

6 December, 2015 at 04:43 GMTVulnerability reported
6 December, 2015 at 04:46 GMTVulnerability verified and confirmed
28 February, 2016 at 05:11 GMTVulnerability details publicly disclosed
28 June, 2016 at 19:44 GMTVulnerability patched and marked as fixed

Comments:

Please login via twitter to be the first one to comment.


Latest Vulnerabilities on *.st-andrews.ac.uk

Vulnerability Reported by Type Status Reported on
Open Bug Bounty
On Hold
13.03.2017
Open Bug Bounty
patched
08.01.2017
Full Disclosure
patched
02.01.2017
Full Disclosure
patched
25.12.2016
Full Disclosure
patched
22.04.2016
Open Bug Bounty
patched
06.12.2015
Open Bug Bounty
patched
28.11.2015
Full Disclosure
patched
01.10.2015
Open Bug Bounty
patched
06.07.2015

Latest Vulnerabilities Reported by Spam404

Domain Type Status Reported
Open Bug Bounty
On Hold
27.03.2017
Open Bug Bounty
On Hold
25.03.2017
Open Bug Bounty
On Hold
22.03.2017
Open Bug Bounty
On Hold
20.03.2017
Open Bug Bounty
On Hold
20.03.2017
Open Bug Bounty
On Hold
19.03.2017
Open Bug Bounty
On Hold
18.03.2017
Open Bug Bounty
On Hold
10.03.2017
Open Bug Bounty
patched
07.03.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017
Open Bug Bounty
On Hold
24.02.2017

Latest VIP Submissions

deepdyve.com
Reported by porthunter Twitter: @porthunter
Recommendations received: 1
Approved XSS vulnerabilities: 306
Approved XSS vulnerabilities on VIP websites: 130
on 27.03.2017
tvzvezda.ru
Reported by porthunter Twitter: @porthunter
Recommendations received: 1
Approved XSS vulnerabilities: 306
Approved XSS vulnerabilities on VIP websites: 130
on 27.03.2017
firmenwissen.de
Reported by badmaxx Twitter: @_badmaxx_
Approved XSS vulnerabilities: 131
Approved XSS vulnerabilities on VIP websites: 1
on 27.03.2017
vto.pe
Reported by qiece Twitter: @qiecew9w
Recommendations received: 3
Approved XSS vulnerabilities: 176
Approved XSS vulnerabilities on VIP websites: 10
on 27.03.2017
antyradio.pl
Reported by DonkeyJJLove Twitter: @DonkeyJJLove
Recommendations received: 9
Approved XSS vulnerabilities: 904
Approved XSS vulnerabilities on VIP websites: 272
on 27.03.2017
porsche.com
Reported by Random_Robbie Twitter: @Random_Robbie
Recommendations received: 9
Approved XSS vulnerabilities: 1981
Approved XSS vulnerabilities on VIP websites: 110
on 27.03.2017
ancestry.co.uk
Reported by Random_Robbie Twitter: @Random_Robbie
Recommendations received: 9
Approved XSS vulnerabilities: 1981
Approved XSS vulnerabilities on VIP websites: 110
on 27.03.2017
classiccars.com
Reported by TvM Recommendations received: 20
Approved XSS vulnerabilities: 1409
Approved XSS vulnerabilities on VIP websites: 421
on 27.03.2017
jlm2017.fr
Reported by DrStache Twitter: @DrStache_
Recommendations received: 27
Approved XSS vulnerabilities: 4536
Approved XSS vulnerabilities on VIP websites: 206
on 27.03.2017
bunshun.jp
Reported by porthunter Twitter: @porthunter
Recommendations received: 1
Approved XSS vulnerabilities: 306
Approved XSS vulnerabilities on VIP websites: 130
on 27.03.2017

Latest Submissions

inwerk-kuechen.de
Reported by secuninja Recommendations received: 3
Approved XSS vulnerabilities: 141
Approved XSS vulnerabilities on VIP websites: 6
on 27.03.2017
musterring.com
Reported by secuninja Recommendations received: 3
Approved XSS vulnerabilities: 141
Approved XSS vulnerabilities on VIP websites: 6
on 27.03.2017
navodayahyd.gov.in
Reported by NullVoid223 Twitter: @NullVoid223
Approved XSS vulnerabilities: 13
Approved XSS vulnerabilities on VIP websites: 3
on 27.03.2017
thanecity.gov.in
Reported by NullVoid223 Twitter: @NullVoid223
Approved XSS vulnerabilities: 13
Approved XSS vulnerabilities on VIP websites: 3
on 27.03.2017
idtr.gov.in
Reported by NullVoid223 Twitter: @NullVoid223
Approved XSS vulnerabilities: 13
Approved XSS vulnerabilities on VIP websites: 3
on 27.03.2017
wieser-kuechen.de
Reported by secuninja Recommendations received: 3
Approved XSS vulnerabilities: 141
Approved XSS vulnerabilities on VIP websites: 6
on 27.03.2017
daheim.de
Reported by secuninja Recommendations received: 3
Approved XSS vulnerabilities: 141
Approved XSS vulnerabilities on VIP websites: 6
on 27.03.2017
digitaltvshop.de
Reported by secuninja Recommendations received: 3
Approved XSS vulnerabilities: 141
Approved XSS vulnerabilities on VIP websites: 6
on 27.03.2017
stagemakeuponline.com
Reported by porthunter Twitter: @porthunter
Recommendations received: 1
Approved XSS vulnerabilities: 306
Approved XSS vulnerabilities on VIP websites: 130
on 27.03.2017
officebusters.com
Reported by porthunter Twitter: @porthunter
Recommendations received: 1
Approved XSS vulnerabilities: 306
Approved XSS vulnerabilities on VIP websites: 130
on 27.03.2017