Unfixed XSS vulnerability at www.jax.org

2008-09-17T00:00:00
ID XSSED:50098
Type xssed
Reporter skathgh420
Modified 2010-08-04T00:00:00

Description

Security researcher skathgh420, has submitted on 17/09/2008 a cross-site-scripting (XSS) vulnerability affecting www.jax.org, which at the time of submission ranked 144124 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 08/04/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.jax.org/search/Main.jsp?sg=0&qt=%3Cscript%3Ealert(%22iBlaze%22)%3C%2Fscript%3E&x=0&y=0