 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 87
 Members: 0
 Total: 87
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
|
I tried that on vBulletin® Version 3.7.x with enabled HTML
the cookie included the USER ID and USER PASSWORD
PWNED
greetinx go to my
pwnographic friends! |
|
|
|
|
vBulletin 3.6.8 Phishing Site
As I have already explained [url=http://www.waraxe.us/ftopict-2482.html#10727]in the other thread it's not possible to fetch the password hash from the cookie. All I w ... |
|
|
|
|
| nice script - if you can tell me how to gain access to an ftp server I could even check it out;-) |
|
|
|
|
| it isn't getting bbsessionhash. It's only getting bblastvisit and bblastactivity. Also it looks like you need have the html page on the same domain as the forum, or it won't accept it as it's not on t ... |
|
|
|
|
| This is a simple but effective XSS link hidden in a youtube embedding code. When the user hovers the video with the mouse all cookie data, referrer url, ip address and browser agent info will be sent ... |
|
|
|
|
Hi!
vBulletin 3.6.8 XSRF/XSS Vulnerability
vBulletin Version: 3.6.8 Patch Level x and possible lower
As administrators can use html in the usertitle an attacker can update the profile of an adm ... |
|
|
| Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
