Security researcher Xylitol, has submitted on 02/03/2009 a cross-site-scripting (XSS) vulnerability affecting asd-www.larc.nasa.gov, which at the time of submission ranked 735 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 21/05/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 02/03/2009 |
Date published: 21/05/2010 |
Fixed? Mail us! | Status: UNFIXED |
Author: Xylitol |
Domain: asd-www.larc.nasa.gov |
Category: XSS |
Pagerank: 735 |
URL: http://asd-www.larc.nasa.gov/SCOOL/register/index.php?lang=%27%22%3E%3Cimg%20src=foo.png%20onerror=a lert(/XSS/)%20/%3E%3CMARQUEE%20BGCOLOR=%22RED%22%3E%3CH1%3EXSSby%20Xylitol%3C/H1%3E%3C/MARQUEE%3E |
Click here to view the mirror
|
|
|