Security researcher Fabian Fingerle, has submitted on 19/05/2008 a cross-site-scripting (XSS) vulnerability affecting www.otto.de, which at the time of submission ranked 1138 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently fixed. |
| Date submitted: 19/05/2008 |
Date published: 23/05/2008 |
Date fixed: 18/06/2008 | Status:  FIXED |
URL: https://www.otto.de/is-bin/INTERSHOP.enfinity/WFS/Otto-OttoDe-Site/de_DE/-/EUR/OV_ViewTemplate-View;
sid=23=?EmailAddress=%22%3E%3Cscript%3Ealert(1)%3B%3C%2Fscript%3E&Template=extendedlogin%2Fpopups%2F
popup_forgot_password_cont |
|
Click here to view the mirror
|
|
|
| 
