seems already fixed ... good job. -Nikolay Kichukov ----- Original Message ----- From: "Florian Stinglmayr" <fstinglmayr@xxxxxxxxx> To: <bugtraq@xxxxxxxxxxxxxxxxx>; <full-disclosure@xxxxxxxxxxxxxxxxx> Sent: Tuesday, March 13, 2007 10:09 AM Subject: [Full-disclosure] XSS at Aon.at, Austrian ISP > Here we go: > > http://jawe.aon.at/search/aon.sp?query=<script>alert(1);</script> > > The issue has been reported to AON before. > > Regards, > Florian Stinglmayr > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ >
