<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> </head> <body bgcolor="#ffffcc" text="#000000"> Here is an email sent to us via <a class="moz-txt-link-abbreviated" href="mailto:webmaster@opensourceforamerica.org">webmaster@opensourceforamerica.org</a>. <br> <br> Could someone please respond to Reed and see if he wants to help or is just sending out a note. <br> <br> thanks,<br> terri <br> <pre>Greetings, The search results page on opensourceforamerica.org suffers from an XSS vulnerability. <a class="moz-txt-link-freetext" href="http://opensourceforamerica.org/Search?q=">http://opensourceforamerica.org/Search?q=</a>"><script>alert('xss');</ script> Just figured I'd drop you a short note to let you know of the issue so you can hopefully fix it. Let me know if you need any more information on this particular issue or XSS in general. :) ~reed -- Reed Loden - <a class="moz-txt-link-rfc2396E" href="mailto:reed@reedloden.com"><reed@reedloden.com></a> </pre> <br> <pre class="moz-signature" cols="72">-- Terri Molini Sun Microsystems, Inc. Global Communications, Open Source OpenSolaris Community, Core Contributor OpenOffice.org Community member +1 (408) 404-4976 office +1 (408) 406-9021 mobile AIM: tmolini "If you want to make enemies, try to change something." -Woodrow Wilson</pre> </body> </html>