Security researcher fallingmidget, has submitted on 26/05/2008 a cross-site-scripting (XSS) vulnerability affecting ecos.fws.gov, which at the time of submission ranked 30447 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/07/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 26/05/2008 |
Date published: 10/07/2008 |
Fixed? Mail us! | Status: UNFIXED |
Author: fallingmidget |
Domain: ecos.fws.gov |
Category: XSS |
Pagerank: 30447 |
URL: http://ecos.fws.gov/tess_public/pub/SpeciesReport.do |
POST: searchstring=%22%2F%3E%3Cmarquee%3E%3Ch1%3EXSSed+by+fallingmidget%3C%2Fh1%3E%3C%2Fmarquee%3E&dscinam e=0&dcomname=1&dgroup=2&dstatus=3&dcurrdist=4&sgroup=0&ssciname=1&scomname=2&searchkey=comname&searc hkey=sciname&header=Results+of+Species+Search&s8fid=24012118330361 |
Click here to view the mirror
|
|
|