[FIXED] XSS in Search

[Sthefano02]

Reporter: S-02@underc0de.org
Affected URL: Search Results for at NeoSmart Technologies
Description: XSS attack
More info: Cross-site scripting - Wikipedia, the free encyclopedia
PoC:

[B]"><script>alert(/Sthefano02/)</script>[/B]

Take de PoC and put it into the input of the search button.

If you don't know how to fix it, please visit Underc[0]de Forum - �ndice

PS: Sorry, bad english.

 

[mqudsi]

Thank you. I'll fix it ASAP.

 

[Sthefano02]

Still having XSS!

Search Results for "><script>alert(/Sthefano02/)</script> at NeoSmart Technologies

1 Week, then I will report this BUG to my brothers.

 

[mqudsi]

Fixed. Thank you