Security researcher GaSmo, has submitted on 13/04/2008 a cross-site-scripting (XSS) vulnerability affecting multiply.com, which at the time of submission ranked 150 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 21/04/2008. It is currently fixed. |
Date submitted: 13/04/2008 |
Date published: 21/04/2008 |
Date fixed: 18/06/2008 | Status: FIXED |
Author: GaSmo |
Domain: multiply.com |
Category: XSS |
Pagerank: 150 |
URL: http://multiply.com/?xurl=http%3A%2F%2Fmultiply.com%2Fgus%2Fjournal%2Fcompose%2Faddthis%3Fbody%3D%26 url%3Dhttp%253A%252F%252Fviewmorepics.myspace.com%252Findex.cfm%253Ffuseaction%253DviewImage%2526fri endID%253D76777018%2526albumID%253D388788%2526imageID%253D23488168%26subject%3Db%25C3%25A4b%25C3%25A 4mben%2Bm%25C3%25B6chte%252C%2Bdass%2Bdu%2Bdir%2Bein%2BFoto%2Bbei%2BMySpace%2Bim%2BAlbum%2BMeine%2BF otos%2Bansieh%22%3E%3Cscript%3Ealert('XSS')%3C/script%3Et&t=1208101168 |
Click here to view the mirror
|
|
|