Security researcher Narcoticxs, has submitted on 18/09/2007 a cross-site-scripting (XSS) vulnerability affecting www.nytimes.com, which at the time of submission ranked 214 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 27/09/2007. It is currently fixed. |
Date submitted: 18/09/2007 |
Date published: 27/09/2007 |
Date fixed: 29/08/2010 | Status: FIXED |
Author: Narcoticxs |
Domain: www.nytimes.com |
Category: XSS |
Pagerank: 214 |
URL: http://www.nytimes.com/2007/09/16/automobiles/16MILES.html?_r=1&ex="><script>alert(document.cookie)< /script>><marquee><h1>By+Narcoticxs</h1></marquee>&oref=slogin |
Click here to view the mirror
|
|
|