Unfixed XSS vulnerability at www.bawag.com

2010-10-12T00:00:00
ID XSSED:71131
Type xssed
Reporter jmit
Modified 2011-12-21T00:00:00

Description

Security researcher jmit, has submitted on 10/12/2010 a cross-site-scripting (XSS) vulnerability affecting www.bawag.com, which at the time of submission ranked 356588 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 21/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://www.bawag.com/BAWAG/PK/SK/18/Suche.html?q=%22%27%3B%3C%2FscRIpt%3E%3Cscript%3Ealert%28document.cookie%29%3C%2FscRipt%3E&view=asSearch