Unfixed XSS vulnerability at indirzone.com

ID XSSED:55034
Type xssed
Reporter Alaim-iZaaf
Modified 2008-02-12T00:00:00


Security researcher Alaim-iZaaf, has submitted on 30/11/2008 a cross-site-scripting (XSS) vulnerability affecting indirzone.com, which at the time of submission ranked 21669575 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 02/12/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://indirzone.com/ara.php?q=<script>alert(String.fromCharCode(097, 108, 097, 105, 109, 105, 122,097, 097, 102 ))</script>