fits.gsfc.nasa.gov cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher NetJackal, has submitted on 27/02/2008 a cross-site-scripting (XSS) vulnerability affecting fits.gsfc.nasa.gov, which at the time of submission ranked 1113 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 03/03/2008. It is currently fixed.

Date submitted: 27/02/2008

Date published: 03/03/2008

Date fixed: 18/03/2008

Status:

FIXED

Author: NetJackal

Domain: fits.gsfc.nasa.gov

Category: XSS

Pagerank: 1113

URL: http://fits.gsfc.nasa.gov/cgi-bin/browse?file="><script>alert('NetJackal')</script>

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention