Bugtraq mailing list archives
[eVuln] microBlog BBCode XSS Vulnerability
From: alex () evuln com
Date: 17 Jan 2006 10:20:35 -0000
New eVuln Advisory: microBlog BBCode XSS Vulnerability http://evuln.com/vulns/36/summary/bt/ --------------------Summary---------------- Software: microBlog Sowtware's Web Site: http://www.stamcar.com/projekti/microblog/ Versions: 2.0 RC-10 Critical Level: Harmless Type: Cross-Site Scripting Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: Aliaksandr Hartsuyeu (eVuln.com) eVuln ID: EV0036 -----------------Description--------------- Arbitrary script code insertion is possible in BBcode [url] tag. Vulnerable Script: functions.php [url] tag isn't properly sanitized. This can be used to post arbitrary script code. --------------Exploit---------------------- Available at: http://evuln.com/vulns/36/exploit/bt/ --------------Solution--------------------- No Patch available. --------------Credit----------------------- Discovered by: Aliaksandr Hartsuyeu (eVuln.com)
Current thread:
- [eVuln] microBlog BBCode XSS Vulnerability alex (Jan 17)