Movistar Chile XSRF / XSS / SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Status: reported Discovered: April 25, 2011, 9:32 p.m. XSS: http://www.movistar.cl/PortalMovistarWeb/appmanager/Porta%3Cscript%3Ealert/xss/%3C/script%3EalMovistar/portal?nfpb=true&pageLabel reported on: http://secureless.org/v/1357/ XSS:...