Unfixed XSS vulnerability at www.festivalbussen.com

ID XSSED:57941
Type xssed
Reporter Uber0n
Modified 2011-12-16T00:00:00


Security researcher Uber0n, has submitted on 09/02/2009 a cross-site-scripting (XSS) vulnerability affecting www.festivalbussen.com, which at the time of submission ranked 4645431 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.festivalbussen.com/event.aspx?EventTypeID=1&sort=%22%20onmouseover=%22alert(123)%22%20HOVER_LINKS_ON_THE_LEFT=%22