|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
MyBB XSS cross-site scripting
addmimistrator
gmail.com
Date: Sat Dec 31 2005 - 02:25:26 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hey
this is a security bug in printthread.PHP script of MyBB(all version also fully patched) that allows XSS crosssite scripting hacking and can be exploit without limitation.
post this message on a thread and go to print view of thread to view execution of exploit.
<script language=javascript>document.write("<script language=javascript>a"+"lert('Security bug allows XSS Cross-site scripting hacking found by imei')</"+"script>");</script>
this bug is in result of poor checking htmlspecialchars in printthread view of a topic and can exploit without any limitation against cookies.
be beauty
imei
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]