annunci.repubblica.it cross-site-scripting (XSS) Vulnerability

Security researcher XaDoS, has submitted on 22/09/2009 a cross-site-scripting (XSS) vulnerability affecting annunci.repubblica.it, which at the time of submission ranked 300 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 15/06/2010. It is currently fixed.

Date submitted: 22/09/2009

Date published: 15/06/2010

Date fixed: 20/07/2010

Status:

FIXED

Author: XaDoS

Domain: annunci.repubblica.it

Category: XSS

Pagerank: 300

URL: http://annunci.repubblica.it/italia/tutti/-/ricerca-%22%3E%3CBODY%20ONLOAD=alert%28%27xados%5Bat%5Dh
otmail%5Bdot%5Dit%27%29%3E

Click here to view the mirror

XSS Attacks
Cross Site Scripting Exploits and Defense

Website Fraud Loss Prevention