Security researcher DaiMon, has submitted on 08/12/2008 a cross-site-scripting (XSS) vulnerability affecting cruises.travel.yahoo.net, which at the time of submission ranked 1 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 25/12/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail.
Date submitted: 08/12/2008 Date published: 25/12/2008 Fixed? Mail us!Status:  UNFIXED
Author: DaiMon Domain: cruises.travel.yahoo.net Category: XSS Pagerank: 1
URL: http://cruises.travel.yahoo.net/s/c/results.asp?porttype=A&SType=P&ptype=c&type=c&port=%22%3E%3Cscri
pt%3Ealert(1)%3C/script%3E
Click here to view the mirror
Home | News | Articles | Advisories | Submit | Alerts | Links | What is XSS | About | Contact | Some Rights Reserved.