Fixed XSS vulnerability at www.draka.com

2008-02-14T00:00:00
ID XSSED:32298
Type xssed
Reporter Fabian Fingerle
Modified 2008-03-04T00:00:00

Description

Security researcher Fabian Fingerle, has submitted on 14/02/2008 a cross-site-scripting (XSS) vulnerability affecting www.draka.com, which at the time of submission ranked 968240 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 03/04/2008. It is currently fixed.

Vulnerable URL: http://www.draka.com/draka/Languages/English/Resources/Top_Menu/result.jsp?Query=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E