technology.jpl.nasa.gov cross-site-scripting (XSS) Vulnerability

Security researcher SaMTHG, has submitted on 22/03/2009 a cross-site-scripting (XSS) vulnerability affecting technology.jpl.nasa.gov, which at the time of submission ranked 790 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 26/03/2009. It is currently fixed.

Date submitted: 22/03/2009

Date published: 26/03/2009

Date fixed: 02/03/2010

Status:

FIXED

Author: SaMTHG

Domain: technology.jpl.nasa.gov

Category: XSS

Pagerank: 790

URL: http://technology.jpl.nasa.gov/search/?searchcriteria=%22%3E%3C%3E%3Cfont+color%3Dred%20size=70%3E%3
Cmarquee%3EXSSed_bY_SaMTHG%3C/marquee%3E%3C%2Ffont%3E%3C

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention