Report Email Alerts Open Bug Bounty: 189,013 coordinated disclosures
Total Vulnerabilities Fixed: 93,740
175,822 vulnerable websites, 16,714 VIP websites
4,267 security researchers, 5,693 notification subscribers

Open Bug Bounty ID

OBB-303325

Coordinated Vulnerability Disclosure

On the 22.09.2017 security researcher OmniGooch Helped patch 1698 vulnerabilities
Received 5 Coordinated Disclosure badges
Received 6 recommendations
reported a XSS vulnerability affecting the findagrave.com website via the Open Bug Bounty coordinated vulnerability disclosure program.

We verified the vulnerability and independently confirmed its existence. Technical details of the vulnerability are currently hidden ("On Hold") to give website owner time to patch the vulnerability without putting any of its users at risk. If patched, vulnerability details can be publicly disclosed by the researcher in at least 30 days since submission, if unpatched - in at least 90 days since submission.

If you are the website owner or administrator please contact the researcher directly to get vulnerability details and proceed to coordinated disclosure.

Coordinated Disclosure Timeline

Vulnerability submitted via Open Bug Bounty22 September, 2017 04:48 GMT
Generic security notifications sent to website owner22 September, 2017 04:51 GMT
Notification sent to subscribers (without technical details)22 September, 2017 06:17 GMT

findagrave.com Profile:

General

Alexa Rank9147
VIP website statusYes
Check findagrave.com for malware:Click here

Description

Find A Grave - Millions of Cemetery Records. Find A Grave is a free resource for finding the final resting places of famous folks, friends and family members. With millions of names, it's an invaluable tool for genealogist and history buffs. Find A Grave memorials are rich with content, including

User Comments:

Please login via twitter to be the first one to comment.


Latest Vulnerabilities on *.findagrave.com

OBB-ID Reported by Status Reported on
patched
24.10.2017
On Hold
22.09.2017
patched
10.08.2017
patched
20.07.2017
patched
12.07.2017
patched
08.06.2017
patched
12.05.2017
unpatched
23.04.2017
patched
18.12.2016
patched
02.11.2016
patched
20.01.2016
patched
09.12.2015
unpatched
09.11.2015
patched
14.10.2015
unpatched
14.10.2015
unpatched
14.10.2015
unpatched
14.10.2015
unpatched
14.10.2015
patched
14.10.2015
patched
14.10.2015

Latest Vulnerabilities Reported by OmniGooch

OBB-ID Vulnerability Status Reported
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
15.12.2017
On Hold
14.12.2017
On Hold
14.12.2017


LATEST VIP SUBMISSIONS

beszamolok.com
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
novy.tv
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
gaadi.com
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
hitosara.com
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
fastcodesign.com
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
qut.edu.au
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
spielaffe.de
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
universal.org
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
dnes.bg
Reported by TAHA Helped patch 126 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 14 recommendations
on 15.12.2017
legacy.com
Reported by TAHA Helped patch 126 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 14 recommendations
on 15.12.2017



LATEST SUBMISSIONS

bnctkorea.com
Reported by deb_security Helped patch 206 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 7 recommendations
on 15.12.2017
www3.animetv.to
Reported by huntingforbug Helped patch 13 vulnerabilities
Received 2 Coordinated Disclosure badges
Received 3 recommendations
on 15.12.2017
efthetos.gr
Reported by fakessh Helped patch 209 vulnerabilities
Received 4 Coordinated Disclosure badges
Received 16 recommendations
on 15.12.2017
k-addicts.net
Reported by SoKa Helped patch 15 vulnerabilities
Received 1 Coordinated Disclosure badges
on 15.12.2017
tokyomk.com
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017
extranet.ursuliah.com
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017
topclasscarpentry.com
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017
g-hosting.cz
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017
the60sofficialsite.com
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017
tscprinters.com
Reported by AndreCalvinho Helped patch 95 vulnerabilities
Received 3 Coordinated Disclosure badges
Received 4 recommendations
on 15.12.2017