Lucene search

K
xssedTenestXSSED:61967
HistoryJun 22, 2009 - 12:00 a.m.

Unfixed XSS vulnerability at search.nationalpetpharmacy.com

2009-06-2200:00:00
tenest
www.xssed.com
5

Security researcher tenest, has submitted on 22/06/2009 a cross-site-scripting (XSS) vulnerability affecting search.nationalpetpharmacy.com, which at the time of submission ranked 217897 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 03/07/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://search.nationalpetpharmacy.com/?D=foobar&Ntt="><script>alert('xssed')</script>&Dk=0&Np=2&N=0&Nty=1