Lucene search

K
xssedHolisticinfosecXSSED:32555
HistoryFeb 19, 2008 - 12:00 a.m.

Unfixed XSS vulnerability at www.northerntool.com

2008-02-1900:00:00
holisticinfosec
www.xssed.com
8

Security researcher holisticinfosec, has submitted on 19/02/2008 a cross-site-scripting (XSS) vulnerability affecting www.northerntool.com, which at the time of submission ranked 21785 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 20/02/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.northerntool.com/webapp/wcs/stores/servlet/NTESearch?storeId=6970&N=0&Ntk=All&Ntt="><SCRIPT>alert('XSS_Alert')<%2FSCRIPT>&Nty=1&D=test&Ntx=mode+matchallpartial&Dx=mode+matchallpartial