Re: New Include Redirect Bug XSS All vBulletin v 3.x.x

[kaneda () bohater net]

On Thu, 21 Jun 2007, scott-REMOVE- () vbulletin com wrote:

:] There is a much more significant issue than executing an XSS if you can upload a file to a remote site...

Good Raining morning...

If he has access for example to /tmp directory or other directory on
hosted server (from another normal (maybe ftp) account in another domain),
he still can run XSS via his bug. In this case his domain can be another
domain (but on the same phisical machine) and IMHO vBulletin should check
path traversal.

best regards
Kanedaaa

btw: of course if he can use ../../ to take file from path outside root
path of vBulletin (like /tmp or another account dir)

:] 
:] If this is how you plan to execute the XSS then there is nothing to fix or even do here on our part.
:] 
:] Scott MacVicar
:] Development Team, vBulletin
:] 

-- 
[][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][]..
[+] You can take our lives,but you will never take our Freedom - W.Wallace
[+] Peace on earth depends on the peace in the peoples hearts - Dalai Lama
[+] Revolution the only solution - System of a down...
[+] Dalej idac dalej dojdziesz dalej siedzac dalej siedzisz - etoe aka ok0
[-] Kanedaaa... Bohateur... Cucumber Team Member...     kaneda () bohater net