eosweb.larc.nasa.gov cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher skathgh420, has submitted on 27/05/2009 a cross-site-scripting (XSS) vulnerability affecting eosweb.larc.nasa.gov, which at the time of submission ranked 746 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 27/05/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 27/05/2009

Date published: 27/05/2009

Fixed? Mail us!

Status:

UNFIXED

Author: skathgh420

Domain: eosweb.larc.nasa.gov

Category: XSS

Pagerank: 746

URL: http://eosweb.larc.nasa.gov/cgi-bin/searchTool.cgi?Dataset="><script>alert"><script>alert(1337)</scr
ipt>(1337)"><script>"><script>alert(1337)</script>alert(1337)</script></script>

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention