[haqqur]

So I saw everyone bragging about some XSS vulnerabilities they found, so I decided I'd post a few, because they really aren't hard to find...

Anyways, here it is:

Code

http://scienceandtechnology.jpl.nasa.gov/search/?searchcriteria=

Code

http://scienceandtechnology.jpl.nasa.gov/search/?searchcriteria="/><h1>Easy</h1>

There are a few filters set in place to try and block all Javascript, but they're not hard to bypass.

[madcodE_]

well there are dozens of xss bugs in NASA domains..
;) ...
question is. what you gonna do with this thing :p ??

[Bob23]

"There are a few filters set in place to try and block all Javascript, but they're not hard to bypass."
They're hard enough to stop your skid ass from bypassing them, which is precisely why you only posted an HTMLi lmao.

[๖ۣۜXilluX]

Nice, recently I have found one in NASA Website, too.