Security researcher Viper.aT, has submitted on 07/01/2009 a cross-site-scripting (XSS) vulnerability affecting search.soufun.com, which at the time of submission ranked 310 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 01/02/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 07/01/2009 |
Date published: 01/02/2009 |
Fixed? Mail us! | Status: UNFIXED |
Author: Viper.aT |
Domain: search.soufun.com |
Category: XSS |
Pagerank: 310 |
URL: http://search.soufun.com/images/search.jsp?sl=zx&q=%D2%C2%B9%F1'"></title><script>alert(1337)</scrip t>'"><marquee><h1>XSS by Viper.aT</h1></marquee> |
Click here to view the mirror
|
|
|