Unfixed XSS vulnerability at www.flash-games.net

ID XSSED:23922
Type xssed
Reporter S0m.Ph
Modified 2007-10-28T00:00:00


Security researcher S0m.Ph, has submitted on 24/10/2007 a cross-site-scripting (XSS) vulnerability affecting www.flash-games.net, which at the time of submission ranked 32136 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 28/10/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.flash-games.net/online-games/adventure-rpg-games-2.php?start=10&order=gameID&max="><script>alert(1);</script>