For the complete article read, http://blogs.hackerscenter.com/dcrab/?p=19 Amazon.com: One of the largest e-commerce websites in the world. It is vulnerable to CR LF injection vulnerabilities, that allow an exploitable XSS situation to exist Screenshot: http://blogs.hackerscenter.com/dcrab/amazon.jpg Msn: I have worked with microsoft on several occassions and found it a huge drag to work with thier slow security response center. I found about 4 - 5 vulnerabilities on various websites in the microsoft network, and reported them in to the Microsoft Security Center. It?s been almost a year since, and 2 of them are fixed, The others still exist. These are completely exploitable as XSS vulnerabilities too. Screenshot: http://blogs.hackerscenter.com/dcrab/msn.jpg
