XSS-vulnerabilities on (mostly) finnish sites --------------------------------------------- Original document: http://www.iki.fi/sintonen/xss.txt This is a list of the XSS-vulnerabilities I've found. The pages are mostly finnish. All vulnerabilities have been notified to the webmaster and CERT, aswell as to the website support contact (usually by using the website form. The CIA form didn't work with Firefox btw). Some of the vulnerabilities have been fixed already, in which case the tinyurl -link won't display the XSS-wiki-page. Please note that some of the sites designated unfixed might already have been fixed since the last update of the file. I'll keep updating the file occasionally. Kotimaisia XSS-haavoittuvuuksia ------------------------------- Alkuperäinen dokumentti: http://www.iki.fi/sintonen/xss.txt Tämä on lista löytämistäni XSS-haavoittuvuuksista. Sivustot ovat pääasiassa kotimaisia. Kaikki aukot on ilmoitettu sivustojen ylläpidoille. Osa haavoittuvuuksista on jo korjattu, jolloin linkki ei näytä XSS-wikipediasivua (huomaa että osa ei-korjatuiksi merkityistä sivuista saattaa olla jo korjattu viimeisen päivityksen jälkeen). Tulen päivittämään dokumenttia ajoittain. tinyurl fixed affected hostname + comments ------- -------- ----------------------------------------- 26.3.2008 -> http://tinyurl.com/yvasfa yes eduskunta.fi http://tinyurl.com/25w4wk yes digitoday.fi http://tinyurl.com/2tqfrs yes itviikko.fi http://tinyurl.com/2cvnwr yes taloussanomat.fi http://tinyurl.com/2pv99j yes hs.fi http://tinyurl.com/2m2lmq yes www.fi 27.3.2008 -> http://tinyurl.com/272th6 yes webmail.saunalahti.fi (saunalahti webmail) http://tinyurl.com/263hap yes suomi.fi http://tinyurl.com/yqonj2 yes kartat.eniro.fi http://tinyurl.com/33ms25 no ec.europa.eu http://tinyurl.com/ys76wl yes elisa.net (ruoka ja viini) http://tinyurl.com/2t2sq8 yes elisa.net (elisa tv) http://tinyurl.com/yq4nfq yes verkkoposti.com http://tinyurl.com/yqzcrb yes haku.posti.fi http://tinyurl.com/3xxucz yes tem.fi (työ- ja elinkeinoministeriö) http://tinyurl.com/2rnxrg no telkku.com http://tinyurl.com/2a97s7 yes fmi.fi (ilmatieteen laitos) http://tinyurl.com/2r6vgd yes webmail.wippies.com http://tinyurl.com/2xubso yes tiehallinto.fi http://tinyurl.com/2nepkb yes iltasanomat.fi (arkistohaku) http://tinyurl.com/2fztvw yes tv.iltasanomat.fi (tvopas-haku) http://tinyurl.com/352oaj no finnmatkat.fi http://tinyurl.com/23qu2w yes mikseri.net http://tinyurl.com/2evjtx yes hel2.fi http://tinyurl.com/2y7uk3 yes webinfo.fi http://tinyurl.com/yskjrx yes yrittajat.fi http://tinyurl.com/2fw536 yes tapiola.fi http://tinyurl.com/yodtcg yes if.fi http://tinyurl.com/29pq5s yes ilmarinen.fi http://tinyurl.com/33om47 yes turva.fi http://tinyurl.com/yux4ee yes elake-fennia.fi http://tinyurl.com/2f9rrf yes vm.fi (valtiovarainministeriö) http://tinyurl.com/2m4h3f yes valtioneuvosto.fi http://tinyurl.com/368vlq yes lime24.fi http://tinyurl.com/2fa47p no yritystele.fi http://tinyurl.com/36wvda yes satakunnankansa.fi http://tinyurl.com/yv6c85 yes kaupunkiopas.com http://tinyurl.com/2vkucx yes tohtori.fi http://tinyurl.com/2lzq2q yes helistin.fi http://tinyurl.com/34mnrg yes otakantaa.fi (valtionhallinnon keskustelufoorumi) http://tinyurl.com/yu24xq yes tulli.fi http://tinyurl.com/386fcj no eniro.fi http://tinyurl.com/2s9ssw yes webmail.kolumbus.fi (Elisa Kotiposti) http://tinyurl.com/2uk452 yes chatserver.suomi24.fi 28.3.2008 -> http://tinyurl.com/3x8ks4 yes iltalehti.fi http://tinyurl.com/2k6oet yes mtv3.fi http://tinyurl.com/2n7uje yes yle.fi http://tinyurl.com/263c8w yes omakaupunki.hs.fi http://tinyurl.com/3yokno yes mfinance.nordea.fi http://tinyurl.com/2efbrq yes kauppalehti.fi http://tinyurl.com/ysnqhw yes blogit.kauppalehti.fi http://tinyurl.com/28sfkm yes otalib.fi (teknillisen korkeakoulun kirjasto) http://tinyurl.com/yqd4kv yes ravintolaopas.net http://tinyurl.com/2b3uls no www.webstudio.fi http://tinyurl.com/32o4ak yes taivaanalla.lasipalatsi.fi http://tinyurl.com/2sk4av yes irc-urls.net http://tinyurl.com/2kwxer no basso.fi http://tinyurl.com/yqlq8d yes portal.kuvalehdet.fi 29.3.2008 -> http://tinyurl.com/2vpvoe yes webmail.saunalahti.fi (jippii webmail) http://tinyurl.com/2wjoku yes www.nelonen.fi http://tinyurl.com/3xrg98 yes www.energiamarkkinavirasto.fi http://tinyurl.com/3bbeh7 yes www.ek.fi http://tinyurl.com/382kcz yes www.wwf.fi http://tinyurl.com/2hmsvr no www.matkavinkit.fi http://tinyurl.com/285bar yes www.bookplus.fi http://tinyurl.com/33lt52 yes www.poliisi.fi 30.3.2008 -> http://tinyurl.com/2d8kmu yes www.bookplus.fi (vain IE) http://tinyurl.com/3yrl74 yes www.mintc.fi (Liikenne- ja viestintäministeriö) http://tinyurl.com/38x3wh yes etuovi.com http://tinyurl.com/224dtd yes aktia.fi (Aktia Säästöpankki) http://tinyurl.com/2bv8ay yes www.mol.fi (Työvoimatoimisto) http://tinyurl.com/yt4hln yes www.vero.fi (Verohallinnon Internet-sivut) http://tinyurl.com/25jqhq yes www.subtv.fi http://tinyurl.com/2a2dbp yes meteli.net http://tinyurl.com/2df3cz no www.helmet.fi http://tinyurl.com/228ax9 no arvopaperi.fi http://tinyurl.com/2ssrnj yes demi.fi 31.3.2008 -> http://tinyurl.com/2heonf yes www.teosto.fi http://tinyurl.com/2tyxvx no copyrightaware.co.uk (www.piracyisacrime.com) http://tinyurl.com/ywf4lm yes www.mol.fi (Työvoimatoimisto) http://tinyurl.com/2ytnsc yes efe.scape.net http://tinyurl.com/ypklo4 yes www.sm-liiga.fi http://tinyurl.com/2qsadg no www.wmg.com 1.4.2008 -> http://tinyurl.com/2cnsxu no www.warnermusic.fi http://tinyurl.com/32ejh8 yes www.levykauppax.fi http://tinyurl.com/25j8hc yes serv3.kopiosto.fi http://tinyurl.com/26g3w4 yes www.hyvitysmaksu.fi http://tinyurl.com/2o5abb yes www.tapahtuma.tv http://tinyurl.com/ysa8ks yes goofinrecords.com/goofinrecords.fi http://tinyurl.com/35x6a7 yes www.eaea.org http://tinyurl.com/2gzo7s yes asiakaspalvelu.sanomamagazines.fi http://tinyurl.com/2xb9nz yes evl.fi http://tinyurl.com/2jnsxn no www.linkkitalo.fi http://tinyurl.com/3683fs no www.ruisrock.fi http://tinyurl.com/yv5c4a yes luettelomedia.fi http://tinyurl.com/2vdpcc yes jokerit.fi ja jokerit.com 2.4.2008 -> http://tinyurl.com/37m5l5 yes search.money.cnn.com http://tinyurl.com/388dr4 yes www.yle.fi (Agricola) http://tinyurl.com/yrzy97 yes server.verkkojulkaisut.vip.fi (McDonalds-haku) [korjattu vartissa!] http://tinyurl.com/26w8xf no www.maf.fi (Mobile Avenue Finland) http://tinyurl.com/23qk66 yes www.ytk.fi (Yleinen työttömyyskassa) http://tinyurl.com/26w64d yes www.sak.fi http://tinyurl.com/2pt36u no jukeboksi.elisa.net http://tinyurl.com/2xfzn5 yes kauppalehti.fi http://tinyurl.com/3cjfrj yes www.blues.fi http://tinyurl.com/2g4rth no www.oulunkarpat.fi 3.4.2008 -> http://tinyurl.com/2vfa32 yes www.iltasanomat.fi http://tinyurl.com/3axav9 yes www.rakkausrunot.fi http://tinyurl.com/2xc4gt yes kauppa.nokia.fi 4.4.2008 -> http://tinyurl.com/6c7eur yes hypno2.mobile.sonera.net http://tinyurl.com/5o8rma yes www.aapeli.com http://tinyurl.com/539xuh wip chat.yle.fi http://tinyurl.com/54l5ch yes www.a-vakuutus.fi http://tinyurl.com/4ovorz yes fimug.fi http://tinyurl.com/5fcv6r yes mainonta.suomi24.fi http://tinyurl.com/5tny9t yes chat.suomi24.fi 5.4.2008 -> http://tinyurl.com/4hlg6w yes subject.subtv.fi http://tinyurl.com/5fcv6r yes www.suomi24.fi http://tinyurl.com/4ekjx7 no tilaukset.talentum.com 6.4.2008 -> http://tinyurl.com/6g9tzz yes store.f-secure.com http://tinyurl.com/6hf6b9 no www.life.fi http://tinyurl.com/3weeyx no www.a-klinikka.fi http://tinyurl.com/4lmefk yes www.gummerus.fi http://tinyurl.com/4he68f yes www.tietokoneopas.com http://tinyurl.com/56ckot yes tv.iltasanomat.fi http://tinyurl.com/492nag yes www.suklaayhdistys.com 7.4.2008 -> http://tinyurl.com/3m6sgl yes iltasanomat.weatherproof.fi http://tinyurl.com/3oz4kr yes www.websites.fi http://tinyurl.com/6pnxqg yes www.020300200.com http://tinyurl.com/4gtxmp no motomania.fi http://tinyurl.com/3v9r5l no www.porvari.com http://tinyurl.com/5w56e2 yes www.verkkouutiset.fi http://tinyurl.com/4lm5dv yes web.eduskunta.fi [more: http://tinyurl.com/44tx7k] http://tinyurl.com/4y4b93 yes www.journalistiliitto.fi http://tinyurl.com/5nno7e no query.nytimes.com 8.4.2008 -> http://tinyurl.com/4mkj3s no www.sonera.fi http://tinyurl.com/6pjfo7 no www.sonera.fi (ssl) http://tinyurl.com/6bbtcr yes www.vtt.fi http://tinyurl.com/4wxbxh yes www.aktia.fi http://tinyurl.com/5ytvn7 yes www.alandsbanken.fi http://tinyurl.com/3s5b6b no play.welho.fi http://tinyurl.com/6eelva yes www.a-vakuutus.fi http://tinyurl.com/446eoc yes pelikone.fi 9.4.2008 -> http://tinyurl.com/6ecaca no www.seiska.fi http://tinyurl.com/4jawyu yes www.hel-looks.com (IE, Opera, Safari) 10.4.2008 -> http://tinyurl.com/4ugkbf yes www.polttoaine.net http://tinyurl.com/4exnmy yes jasen.suomi24.fi http://tinyurl.com/5l74tu yes www.vtt.fi (vain IE) http://tinyurl.com/6h943p no www.adeptus.fi [more: http://tinyurl.com/6rhszx] http://tinyurl.com/3zvxjp yes www.abloy.fi 11.4.2008 -> http://tinyurl.com/4j72xx yes web.eduskunta.fi [more: http://tinyurl.com/3zdtv2] http://tinyurl.com/5bjb4e yes www.journalistiliitto.fi http://tinyurl.com/3vgewx yes www.ray.fi http://tinyurl.com/3hvg7m no www.paihdelinkki.fi http://tinyurl.com/3ujx48 no www.teliasonera.fi http://tinyurl.com/54fez8 no www.elisa.fi 12.4.2008 -> http://tinyurl.com/5wcy59 yes www.vnk.fi http://tinyurl.com/6mf579 yes www.hypo.fi http://tinyurl.com/5jkhgj yes www.ooppera.fi http://tinyurl.com/46l8px yes www.mansoft.fi [more: http://tinyurl.com/3zjf63] http://tinyurl.com/63d7le yes www.veikkaus.fi 13.4.2008 -> http://tinyurl.com/5gbygf no www.hetilainaa.fi http://tinyurl.com/4e4o4e no www.paihdelinkki.fi http://tinyurl.com/4vwwq3 yes www.mtv3.fi http://tinyurl.com/4vxkjm yes www.eduskunta.fi http://tinyurl.com/6s2n9s yes www.yle.fi (asxgene.php) http://tinyurl.com/6foj3t no areena.yle.fi http://tinyurl.com/4jzp3r yes www2.hs.fi 14.4.2008 -> http://tinyurl.com/4e7jkw yes www.iltalehti.fi http://tinyurl.com/5pn5fn yes plaza.fi http://tinyurl.com/5axlhb no www.europarl.europa.eu http://tinyurl.com/3s33ed no europa.eu http://tinyurl.com/6cdnoz no www.cia.gov http://tinyurl.com/3zadg4 yes search.ebay.com [requires session cookies, that is a visit at www.ebay.com] 15.4.2008 -> http://tinyurl.com/64wd72 no www.dailymotion.com http://tinyurl.com/5gbaou no search.ca.com http://tinyurl.com/5b43gp no search.unisys.com 16.4.2008 -> http://tinyurl.com/5eaune no www.mpaa.org http://tinyurl.com/4mjq9g yes www.fcc.gov 17.4.2008 -> http://tinyurl.com/5hqpl2 no www.osac.gov http://tinyurl.com/6pqpfv yes www.takuu-saatio.fi http://tinyurl.com/4to4q9 no dssr.state.gov [requires session cookies, visit http://dssr.state.gov/ first] http://tinyurl.com/6363ht no www.senate.gov http://tinyurl.com/5dkalr no www.fbijobs.gov http://tinyurl.com/3px7zb yes www.nas.nasa.gov http://tinyurl.com/6c49xy yes knowledge.verisign.com http://tinyurl.com/66sgy7 yes searchcgi.apple.com [Firefox only] http://tinyurl.com/4bqxsr no www.dss.mil http://tinyurl.com/3juqyh no www.scientologytoday.org 18.4.2008 -> http://tinyurl.com/6e6hyk no www.scientology.org http://tinyurl.com/3o6nbt yes www.us.army.mil http://tinyurl.com/3zgfln yes www.darpa.mil 19.4.2008 -> http://tinyurl.com/3eegvz yes www.polarartistit.fi 20.4.2008 -> http://tinyurl.com/4q2pkj no www.bbc.co.uk http://tinyurl.com/4arnt3 no www.reuters.com http://tinyurl.com/69qkw3 no www.washingtonpost.com http://tinyurl.com/4cpw9e no www.un.org 21.4.2008 -> http://tinyurl.com/3j7vaq no web.mit.edu http://tinyurl.com/542by9 yes www.ampparit.com http://tinyurl.com/4hn6rj yes fin.afterdawn.com 22.4.2008 -> http://tinyurl.com/3k8s5w no dev.w3.org http://tinyurl.com/3qrdz9 yes www.w3.org http://tinyurl.com/6fu88t yes votehillary.org [requires reg now?] 23.4.2008 -> http://tinyurl.com/5h9se7 no www.space.com 24.4.2008 -> http://tinyurl.com/4rzgfw yes secure.interop.com http://tinyurl.com/3s4nd9 no www.gocsi.com http://tinyurl.com/4cugnr yes computing.fnal.gov 5.5.2008 -> http://tinyurl.com/4npn7u yes www.imperiumi.net 6.5.2008 -> http://tinyurl.com/6ya7ox no www.kela.fi http://tinyurl.com/43dhsf yes www.sfnet.fi 7.5.2008 -> http://tinyurl.com/63jp8j no www.tarjaturunen.com 8.5.2008 -> http://tinyurl.com/5scgwb no www.if.fi 9.5.2008 -> http://tinyurl.com/5solag no www.tietokone.fi 10.5.2008 -> http://tinyurl.com/46qh6d yes www.mbnet.fi http://tinyurl.com/3kpgnh yes www.amiga.com http://tinyurl.com/6ah97n no www.os4depot.net http://tinyurl.com/5rdmpc yes www.amiga.com 11.5.2008 -> http://tinyurl.com/68grlq yes www.ferratum.fi http://tinyurl.com/4of89c no kauppa.terrarahoitus.fi http://tinyurl.com/5xl6mz yes www.vipmoney.fi http://tinyurl.com/6getng no www.mobiilipassi.fi 12.5.2008 -> http://tinyurl.com/3vomg8 yes www.digipaper.fi http://tinyurl.com/5lrowr no pelit.mobileavenue.net http://tinyurl.com/5fk4n5 no alypaa.com http://tinyurl.com/49453f no www.rkioski.fi http://tinyurl.com/52c36c no mccain.senate.gov 13.5.2008 -> http://tinyurl.com/4h8g8j no client.n-gage.com http://tinyurl.com/4633tr no www.n-gage.com http://tinyurl.com/3p4hnx yes www.omaoulu.fi 14.5.2008 -> http://tinyurl.com/4mzfjq yes www.vertaa.fi http://tinyurl.com/3nbwv4 no www.ircquotes.net http://tinyurl.com/6e74pg yes www.vtv.fi 15.5.2008 -> http://tinyurl.com/53tcbc no nettitv.mtv3.fi http://tinyurl.com/4yxmrz no www.irchelp.org http://tinyurl.com/4eao5f no pxweb2.stat.fi [might need to enter the url twice] http://tinyurl.com/5yj4hq no www.suosikit.fi http://tinyurl.com/4unc5u yes www.napsu.fi http://tinyurl.com/4nvln2 no naurunappula.com http://tinyurl.com/4jt5ey no www.meseweb.fi http://tinyurl.com/44pzrq no www.tilt.tv http://tinyurl.com/4ysg3k yes www.turva.fi http://tinyurl.com/43qyv7 no secure.hack.fi http://tinyurl.com/3zs8c3 no www.yle.fi http://tinyurl.com/4hu3f3 no www.nelonen.fi 16.5.2008 -> http://tinyurl.com/3z5wgu no www.112.fi http://tinyurl.com/6j6dyr yes www.oikeusasiamies.fi [Teamware Plaza CMS issue, multiple sites] http://tinyurl.com/69sad6 yes www.finlex.fi http://tinyurl.com/4mn4tm yes tietokannat.mil.fi http://tinyurl.com/3u5myb yes www.paypal.com [EV-SSL Cert, critical!!] http://tinyurl.com/4fbjcb yes www.moneybookers.com 17.5.2008 -> http://tinyurl.com/6nax3u no www.iihf.com 18.5.2008 -> http://tinyurl.com/6nye2q yes www512.sampopankki.fi [Requires session cookies, click continue and paste the url again] http://tinyurl.com/5z5eff yes www.nordearahoitus.fi http://tinyurl.com/59xoke yes www.tapiola.fi http://tinyurl.com/6ytltz yes www.aktia.fi http://tinyurl.com/68d8cp no webprod.pohjola.fi http://tinyurl.com/6kdftl yes www.op.fi http://tinyurl.com/6346g5 no www.keltainenporssi.fi http://tinyurl.com/6q63jc no www.skandia.fi http://tinyurl.com/6lqqru yes www.inoa.fi http://tinyurl.com/62pu45 no www2.tukes.fi 19.5.2008 -> http://tinyurl.com/6dnfjs yes pop.city.fi [SecuryCast webshop engine: http://tinyurl.com/6d79gl] http://tinyurl.com/5s2oa3 no apps.myspace.com http://tinyurl.com/4c5keh no www.hi5.com http://tinyurl.com/4mlt3p no secure.partyaccount.com http://tinyurl.com/4opnn5 no www-ssl.bestbuy.com http://tinyurl.com/59u7vm no www.truste.org 20.5.2008 -> http://tinyurl.com/62597b no www.kotitieto.fi http://tinyurl.com/4y62xr no www.presidentti.fi http://tinyurl.com/3k3y49 no www.tpk.fi http://tinyurl.com/4t2e52 yes www.oracle.com http://tinyurl.com/4cvf7j no puoti.pmk.posti.fi [requires site cookies, so visit it first] 21.5.2008 -> http://tinyurl.com/68c4dd no accounts.craigslist.org 23.5.2008 -> http://tinyurl.com/6h5l52 yes www.tva.gov http://tinyurl.com/6okg5h no www.finnair.fi http://tinyurl.com/4u89pc no www.weather.com http://dy.fi/diw no www.usercash.com http://tinyurl.com/3shwgo no www.shoppi.fi 24.5.2008 -> http://tinyurl.com/3k8gkl no www.esctoday.com http://tinyurl.com/4oa8ax yes www.eurovisionshop.tv 28.5.2008 -> http://tinyurl.com/3k7q5r yes www.hs.fi http://tinyurl.com/4eh7yd yes www.ylioppilastutkinto.fi http://tinyurl.com/4ph9wy yes yle.mobi http://tinyurl.com/5dyvfn no www.plan.fi 29.5.2008 -> http://tinyurl.com/4tcowv yes www.tv-maksu.fi 30.5.2008 -> http://tinyurl.com/447l3t no www.eurocardgold.fi http://tinyurl.com/5pvgbc no www.visapromotions.net http://tinyurl.com/6kenx5 no www1.nordea.fi http://tinyurl.com/3oxkf6 yes www.nordearahoitus.fi http://tinyurl.com/3ulu3d no www.firstcard.fi 31.5.2008 -> http://tinyurl.com/6yfcbn no www.facebook.com 1.6.2008 -> http://tinyurl.com/4y6so5 no www.verkkouutiset.fi http://tinyurl.com/4rjlsy no www.kaleva.fi http://tinyurl.com/6zhomd no www.habbohotel.fi http://tinyurl.com/5jxtye no www.habbohotel.com http://tinyurl.com/5cap79 yes kuvake.net http://tinyurl.com/5bb8an no www.koulukaverit.com http://tinyurl.com/5vdx4f no vuodatus.net http://tinyurl.com/5nj9vd no www.huuto.net http://tinyurl.com/42wrdm yes www.dvdplaza.fi 2.6.2008 -> http://tinyurl.com/64gcq4 yes www.digitoday.fi http://tinyurl.com/3h49x3 yes www.taloussanomat.fi http://tinyurl.com/68hxx5 yes www.it-viikko.fi http://tinyurl.com/4pf27f yes www.taloussanomat.fi http://tinyurl.com/4r2lxe no www.hs.fi http://tinyurl.com/6y5gnh no www.mol.fi http://tinyurl.com/4jyh3o no www.rd.com http://tinyurl.com/5vw2eg no wwwl.ymparisto.fi 3.6.2008 -> http://tinyurl.com/4hhsw2 no www.ilkka.fi http://tinyurl.com/45wvsw no www.esr.fi http://tinyurl.com/44j6bo no service.vr.fi http://tinyurl.com/4vq3fl no www.matkahuolto.info http://tinyurl.com/5senak yes www.suomi24.fi http://tinyurl.com/45rsqa no www.kaapelitelevisio.fi http://tinyurl.com/3r3x8r no www.suomi24.fi 4.6.2008 -> http://tinyurl.com/5axabx no www.nelonen.fi 5.6.2008 -> http://tinyurl.com/5t4u5r no www.icann.org 6.6.2008 -> http://tinyurl.com/4x2e6a no www.copyright.com 12.6.2008 -> http://tinyurl.com/6xmxow no www.yle.fi http://tinyurl.com/4mvp8q yes www.eurooppatiedotus.fi 14.6.2008 -> http://tinyurl.com/3u6vvf yes admin.iki.fi http://tinyurl.com/62l4b8 no www.kunnat.net http://tinyurl.com/6fpcqx no login.valtiokonttori.fi For more information about XSS-vulnerabilities: http://en.wikipedia.org/wiki/Cross-site_scripting In finnish: http://www.cert.fi/tietoturvanyt/2008/03/P_6.html http://www.cert.fi/tietoturvanyt/2008/03/P_7.html http://xss.dy.fi/ This documented is licensed under the Creative Commons license: http://creativecommons.org/licenses/by-nc/3.0/ - Harry Sintonen