Open Bug Bounty ID
OBB-259895 |
fullfact.org Security Vulnerability
On the 05.07.2017 security researcher hackdemonium
Helped patch 150 vulnerabilities
Received 6 Coordinated Disclosure badges
Received 8 recommendations
disclosed XSS vulnerability affecting fullfact.org website.
On our side, we have notified website owner via all reasonable communication channels about the vulnerability, so it can be patched as quickly as possible.
Currently the vulnerability is patched and does not represent any security risk for the website or its visitors.
Vulnerability Details
fullfact.org Description
| Full Fact. Full Fact is the UK's independent factchecking organisation. |
Vulnerable URL:
| https://fullfact.org/search/?q=a'aa"onfocus=prompt(/OPENBUGBOUNTY/) autofocus=x bad=--></title></script><img src=x onerror=prompt(/OPENBUGBOUNTY/)> |
Other details:
| Patched: | Yes, at 05.07.2017 |
| Latest check for patch: | 05.07.2017 11:24 GMT |
| Vulnerability type: | XSS |
| Vulnerability status: | Publicly disclosed |
| Alexa Rank | 73906 |
| VIP website status: | Yes |
| Check fullfact.org for malware: | Click here |
| Check fullfact.org SSL connection: | Click here (Grade: A+)
Refresh Results
|
Mirror: Click here to view the mirror
Coordinated Disclosure Timeline
| Vulnerability submitted via Open Bug Bounty | 5 July, 2017 10:17 GMT |
| Generic security notifications sent to website owner | 5 July, 2017 10:19 GMT |
| Customized security notification sent to website owner | 5 July, 2017 10:19 GMT |
| Notification sent to subscribers (without technical details) | 5 July, 2017 14:17 GMT |
| Vulnerability patched by the website owner | 6 July, 2017 05:46 GMT |
| Vulnerability details disclosed by researcher | 6 July, 2017 12:25 GMT |
User Comments:
Please login via twitter to be the first one to comment.
Latest Vulnerabilities on *.fullfact.org
| OBB-ID | Reported by | Status | Reported on |
|
patched
|
05.07.2017
|
Latest Vulnerabilities Reported by hackdemonium
| OBB-ID | Vulnerability | Status | Reported |
|
On Hold
|
11.08.2017
|
||
|
On Hold
|
11.08.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
||
|
On Hold
|
23.07.2017
|
