Unfixed XSS vulnerability at swee.iowa.uiowa.edu

2009-10-05T00:00:00
ID XSSED:60475
Type xssed
Reporter PDX_1911
Modified 2009-07-07T00:00:00

Description

Security researcher PDX_1911, has submitted on 10/05/2009 a cross-site-scripting (XSS) vulnerability affecting swee.iowa.uiowa.edu, which at the time of submission ranked 9119 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 07/07/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: https://swee.iowa.uiowa.edu/admin/login.asp?ErrMsg=%3CSCRIPT%3Ealert(%27XSSed%20BY%20PDX_1911%27);%3C/SCRIPT%3E