Unfixed XSS vulnerability at store.officedepot.com.mx

2009-05-29T00:00:00
ID XSSED:61261
Type xssed
Reporter DangerLui
Modified 2010-07-18T00:00:00

Description

Security researcher DangerLui, has submitted on 29/05/2009 a cross-site-scripting (XSS) vulnerability affecting store.officedepot.com.mx, which at the time of submission ranked 41888 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 18/07/2010. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://store.officedepot.com.mx/OnlineStore/SearchSKUs.do?sku="><script>alert("Lui%20haxored%20thiz%20shit");</script>