Unfixed XSS vulnerability at www.hildesheim.de

ID XSSED:39056
Type xssed
Reporter TurKPoweR
Modified 2008-10-11T00:00:00


Security researcher TurKPoweR, has submitted on 17/05/2008 a cross-site-scripting (XSS) vulnerability affecting www.hildesheim.de, which at the time of submission ranked 795820 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 10/11/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.hildesheim.de/tprh/index.php?root=82&catID=none&regID=3836&search_item=<script>alert('By_TurKPoweR')</script><h1>HACKED-By-TurKPoweR