fema.gov can be XSS'ed

Hi! After a fdew hours working on http://www.fema.gov I discovered some critical vuln's that can be used by attacker to redirect you on another site.

Here is one link from the list that I have discovered:

http://www.fema.gov/goodbye/goodbye.jsp?url=http://google.com

How you can see, it redirects you from FEMA to GOOGLE till you are waiting FEMA page loading.

Much more later...

That's it for now!

Keep your security up!

Follow me on twitter @anon4_freedom or here...

Everything for lulz...