one.msn.co.il cross-site-scripting (XSS) Vulnerability

Security researcher CCC, has submitted on 07/04/2008 a cross-site-scripting (XSS) vulnerability affecting one.msn.co.il, which at the time of submission ranked 3857 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently fixed.

Date submitted: 07/04/2008

Date published: 23/05/2008

Date fixed: 29/04/2008

Status:

FIXED

Author: CCC

Domain: one.msn.co.il

Category: XSS

Pagerank: 3857

URL: http://one.msn.co.il/pictures/search.asp?SUBMIT.x=31&SUBMIT.y=12&data=%22%3E%3Cscript%3Ealert%281%29
%3C%2Fscript%3E&worldx=1

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention