https://www.24hours.pk – XSS Vulnerability
May 8, 2016Pakistan FO to seek ISI help against cyber attacks
May 16, 2016
pcb.com.pk
Pakistan Cricket Board (PCB) Official Website. The Pakistan Cricket Board (PCB) is the central industry for cricket in Pakistan which deals with all the concerned matters of Pakistan cricket and International cricket.
22 April, 2016 at 15:26 GMT Vulnerability reported via Open Bug Bounty
8 May, 2016 at 08:54 GMT Notification sent to generic security emails
8 May, 2016 at 08:54 GMT Vulnerability verified and confirmed
8 May, 2016 at 10:17 GMT Notification sent to subscribers (without technical details)
Technical details of the vulnerability are currently hidden (“On Hold”) to give website owner time to patch the vulnerability without putting any of its users at risk.