Lucene search

K
xssedTenestXSSED:26740
HistoryNov 28, 2007 - 12:00 a.m.

Fixed XSS vulnerability at www.orientaltrading.com

2007-11-2800:00:00
tenest
www.xssed.com
15

Security researcher tenest, has submitted on 28/11/2007 a cross-site-scripting (XSS) vulnerability affecting www.orientaltrading.com, which at the time of submission ranked 6618 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently fixed.

Vulnerable URL: http://www.orientaltrading.com/application?namespace=search&origin=searchMain.jsp&event=button.search&Ntt=<img src=foo.png onerror=alert(‘xssed’) />&x=12&y=20&Ntk=all&Ntx=mode%2Bmatchallpartial&N=0