Report Email Alerts Open Bug Bounty: 164,336 coordinated disclosures
Total Vulnerabilities Fixed: 76,731
158,975 vulnerable websites, 15,765 VIP websites
3,900 security researchers, 5,277 notification subscribers

Open Bug Bounty ID

OBB-267129

bauhaus.info Security Vulnerability

On the 23.07.2017 security researcher ThomySec Helped patch 25 vulnerabilities
Received 1 Coordinated Disclosure badges
disclosed XSS vulnerability affecting bauhaus.info website.

On our side, we have notified website owner via all reasonable communication channels about the vulnerability, so it can be patched as quickly as possible.

Currently the vulnerability is patched and does not represent any security risk for the website or its visitors.

Vulnerability Details


bauhaus.info Description

Spezialist für Werkstatt, Haus und Garten | BAUHAUS. BAUHAUS Online-Shop - Ihr Fachcentrum wenn es gut werden muss. Wir sind Ihr Spezialist für Werkzeuge, Baumaterialien und Gartenbedarf. Wir bieten Ihnen.

Vulnerable URL:

Research's Comment:

Open the provided URL in Firefox.
The XSS opens automatically via autofocus as it triggers onfocus of the search field

Other details:

Patched:Yes, at 12.10.2017
Latest check for patch:12.10.2017 10:58 GMT
Vulnerability type:XSS
Vulnerability status:Publicly disclosed
Alexa Rank10956
VIP website status:Yes
Check bauhaus.info for malware:Click here

Mirror: Click here to view the mirror

Coordinated Disclosure Timeline

Vulnerability submitted via Open Bug Bounty23 July, 2017 16:18 GMT
Vulnerability existence verified and confirmed 24 July, 2017 11:14 GMT
Generic security notifications sent to website owner24 July, 2017 11:14 GMT
Customized security notification sent to website owner24 July, 2017 11:14 GMT
Vulnerability details disclosed by researcher23 August, 2017 11:16 GMT
Vulnerability patched by the website owner12 October, 2017 10:58 GMT

User Comments:

Please login via twitter to be the first one to comment.


Latest Vulnerabilities on *.bauhaus.info

OBB-ID Reported by Status Reported on
patched
23.07.2017
patched
31.01.2017
patched
11.12.2015

Latest Vulnerabilities Reported by ThomySec

OBB-ID Vulnerability Status Reported
On Hold
14.08.2017
On Hold
11.08.2017
On Hold
11.08.2017
patched
04.08.2017
On Hold
04.08.2017
On Hold
04.08.2017
On Hold
03.08.2017
On Hold
30.07.2017
On Hold
30.07.2017
patched
28.07.2017
patched
28.07.2017
patched
23.07.2017
unpatched
24.05.2017
patched
23.05.2017
unpatched
23.05.2017
unpatched
23.05.2017
unpatched
15.05.2017
unpatched
07.05.2017
unpatched
07.05.2017
unpatched
07.05.2017


LATEST VIP SUBMISSIONS

bokra.top
Reported by RootByte Helped patch 312 vulnerabilities
Received 3 Coordinated Disclosure badges
on 19.10.2017
drom.ru
Reported by TAHA Helped patch 4 vulnerabilities
Received 0 Coordinated Disclosure badges
Received 2 recommendations
on 19.10.2017
everything5pounds.com
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
hktvmall.com
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
trekbikes.com
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
croma.com
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
tatacliq.com
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
mec.ca
Reported by nomanAli181 Helped patch 7 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
library.upenn.edu
Reported by deb_security Helped patch 1 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
friday.ru
Reported by amlnspqr Helped patch 901 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 10 recommendations
on 19.10.2017



LATEST SUBMISSIONS

webstarts.com
Reported by TAHA Helped patch 4 vulnerabilities
Received 0 Coordinated Disclosure badges
Received 2 recommendations
on 19.10.2017
promo-radio.com
Reported by fakessh Helped patch 53 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 4 recommendations
on 19.10.2017
wap.freesharewarecenter.com
Reported by fakessh Helped patch 53 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 4 recommendations
on 19.10.2017
bulat.ru
Reported by amlnspqr Helped patch 901 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 10 recommendations
on 19.10.2017
eknives.ru
Reported by amlnspqr Helped patch 901 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 10 recommendations
on 19.10.2017
messermeister.ru
Reported by amlnspqr Helped patch 901 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 10 recommendations
on 19.10.2017
purinamills.com
Reported by ravens78 Helped patch 0 vulnerabilities
Received 0 Coordinated Disclosure badges
on 19.10.2017
centeroninstruction.org
Reported by fakessh Helped patch 53 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 4 recommendations
on 19.10.2017
gfcf.com
Reported by AndreCalvinho Helped patch 4 vulnerabilities
Received 1 Coordinated Disclosure badges
on 19.10.2017
eladders.com
Reported by AndreCalvinho Helped patch 4 vulnerabilities
Received 1 Coordinated Disclosure badges
on 19.10.2017