id.icross.co.kr cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher kusomiso.com, has submitted on 05/09/2007 a cross-site-scripting (XSS) vulnerability affecting id.icross.co.kr, which at the time of submission ranked 115556 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 08/09/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 05/09/2007

Date published: 08/09/2007

Fixed? Mail us!

Status:

UNFIXED

Author: kusomiso.com

Domain: id.icross.co.kr

Category: XSS

Pagerank: 115556

URL: https://id.icross.co.kr/loginout/login.icross?returl=&frm=&m_id=%22%3E%3CIMG%20src=no_such_icon%20on
error=alert(document.cookie);%3E&m_passwd=E&m_secure=1

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention