Lucene search

K
xssedTenestXSSED:15463
HistoryFeb 09, 2007 - 12:00 a.m.

Fixed XSS vulnerability at www.brookstone.com

2007-02-0900:00:00
tenest
www.xssed.com
9

Security researcher tenest, has submitted on 02/09/2007 a cross-site-scripting (XSS) vulnerability affecting www.brookstone.com, which at the time of submission ranked 35174 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/09/2007. It is currently fixed.

Vulnerable URL: http://www.brookstone.com/search/search.asp?cm_re=A_Ftr*Search*N/A&N=0&Ntk=product&Ntt=&act=A30&search_type=search&search_words=)%3B %2F%2F--><%2Fscript> <script>alert(%2Fxss%2F)%3B<%2Fscript> <!--&cmid=hdr_search&cm_re=A_Hdr*Search*N/A