Lucene search

K
xssedAzat HarutyunyanXSSED:40287
HistoryMay 29, 2008 - 12:00 a.m.

Unfixed XSS vulnerability at corp-gov.ru

2008-05-2900:00:00
Azat Harutyunyan
www.xssed.com
7

Security researcher Azat Harutyunyan, has submitted on 29/05/2008 a cross-site-scripting (XSS) vulnerability affecting corp-gov.ru, which at the time of submission ranked 1255383 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://corp-gov.ru/bd/db.php3?db_id=4157’&base_id='>><marquee><h1>AZAT WAS HERE</h1></marquee>“><script>alert(1)</script>”><script>alert(1)</script>

References