A Cross Site Scripting Vulnerability has been found in we all know about Alexa and if any body don’t know so can read below, so come to the point Alexa which provides Website Ranking all over the World ,the vulnerability exists in  Alexa Toolbar search page-( Which is a custom search provided by Google.

Hacker Named Kuksool from the Hacker Group “n0careteam” has done this Job. 

Who is Alexa?

Alexa Internet, Inc. is a California-based subsidiary company of Once it is installed, the Alexa toolbar collects data on browsing behavior and transmits it to the website, where it is stored and analyzed, forming the basis for the company’s web traffic reporting. As of 2013, Alexa provides traffic data, global rankings and other information on 30 million websites, and claims that 6 million people visit its website monthly

If you have installed the alexa toolbar on your browser so you can do the Practical Right Now, just inject the given Script in the Search box and see what happens:


Click to Enlarge

Alexa Description from Wikipedia



This site uses Akismet to reduce spam. Learn how your comment data is processed.