Lucene search

K
xssedAppleJaxXSSED:46886
HistoryApr 08, 2008 - 12:00 a.m.

Unfixed XSS vulnerability at www.bookcloseouts.com

2008-04-0800:00:00
AppleJax
www.xssed.com
10

Security researcher AppleJax, has submitted on 04/08/2008 a cross-site-scripting (XSS) vulnerability affecting www.bookcloseouts.com, which at the time of submission ranked 112808 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 06/08/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.bookcloseouts.com/default.asp?N=0&Nty=1&D='"><script>alert('xss')%3B<%2Fscript>&Ntk=Default&Ntx=mode%2Bmatchallpartial&Dx=mode%2Bmatchallpartial&Ntt='"><script>alert('xss')%3B<%2Fscript>&submit.x=26&submit.y=12