Unfixed XSS vulnerability at www.unhcr.ru

ID XSSED:61721
Type xssed
Reporter TurKPoweR
Modified 2011-12-16T00:00:00


Security researcher TurKPoweR, has submitted on 12/06/2009 a cross-site-scripting (XSS) vulnerability affecting www.unhcr.ru, which at the time of submission ranked 2119037 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.unhcr.ru/poisk.php?poisk_word=>"><ScRiPt%20%0a%0d>alert(123,9336530671)%3B</ScRiPt>%22%3c%2fscript%3e%3ch1%3eXSS%20By%20TurKPoweR-FROM%20TURKEY