web2.gov.mb.ca cross-site-scripting (XSS) Vulnerability

Security researcher Nullflow, has submitted on 26/07/2007 a cross-site-scripting (XSS) vulnerability affecting web2.gov.mb.ca, which at the time of submission ranked 62717 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 27/07/2007. It is currently fixed.

Date submitted: 26/07/2007

Date published: 27/07/2007

Date fixed: 23/06/2008

Status:

FIXED

Author: Nullflow

Domain: web2.gov.mb.ca

Category: XSS

Pagerank: 62717

URL: http://web2.gov.mb.ca/laws/search.php?statdir=ccsm&search_query=%3Cscript%3Ealert%28%27nullflow%27%2
9%3C%2Fscript%3E&submit=Go%21

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention