Unfixed XSS vulnerability at www.previmeteo.com

ID XSSED:46276
Type xssed
Reporter Sheiry
Modified 2008-07-09T00:00:00


Security researcher Sheiry, has submitted on 26/07/2008 a cross-site-scripting (XSS) vulnerability affecting www.previmeteo.com, which at the time of submission ranked 97843 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/09/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.previmeteo.com/meteo_locale/recherche.php?city="<script>alert(1337)%3B<%2Fscript>&form_pays=Choisir+un+pays&x=10&y=9