Mercadolibre.com suffers from cross site scripting and remote javascript insertion vulnerabilities

+========================================================================================+
+          Mercadolibre.com  security compromised with XSS/ RFI /Phishing flaws          +
+========================================================================================+

Author(s): Ivan Sanchez
Product: mercadolibre.com
Web:https://www.mercadolibre.com
Versions,sites affected: Copyright 1999-2008 MercadoLibre S.A.
Date: 27/08/2008

CODE: http://packetstormsecurity.org/0808-exploits/mercadolibre-xssrfi.txt

Fonte: http://www.nullcode.com.ar