Unfixed XSS vulnerability at busca.r7.com

ID XSSED:74928
Type xssed
Reporter NetFuzzer
Modified 2011-12-22T00:00:00


Security researcher NetFuzzer, has submitted on 22/12/2011 a cross-site-scripting (XSS) vulnerability affecting busca.r7.com, which at the time of submission ranked 1011 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 22/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Vulnerable URL: http://busca.r7.com/s?_te=&q=ssssssssssssssssssssssssss%27};%20alert%28document.cookie%29;%20var%20c%20=%20{%27vuln%27:%27XSS