TUCoPS :: HP Unsorted T :: b06-2709.htm

Timberland search xss vulnerability
Timberland Search XSS Vulnerability
Timberland Search XSS Vulnerability



There's a vulnerability in Timberland's search engine.

The variable 'keywords' in searchHandler/index.jsp is not correctly sanitized.

URL:
hxxp://www.timberland.com/searchHandler/index.jsp?keywords=[XSS Code]

Example:
hxxp://www.timberland.com/searchHandler/index.jsp?keywords=

Author: O.G.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986- AOH