MiniBB 1.2 – Cross-Site Scripting

20次阅读
没有评论

MiniBB 1.2 – Cross-Site Scripting

漏洞ID 1053577 漏洞类型
发布时间 2002-04-17 更新时间 2002-04-17
MiniBB 1.2 - Cross-Site ScriptingCVE编号 N/A
MiniBB 1.2 - Cross-Site ScriptingCNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/21427
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/4619/info

MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting attacks.

This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a website running MiniBB. 

http://target/forums/index.php?action=search&searchFor="><script>alert("test")</script >

相关推荐: Caldera OpenServer Port Scan InetD Denial of Service Vulnerability

Caldera OpenServer Port Scan InetD Denial of Service Vulnerability 漏洞ID 1102509 漏洞类型 Design Error 发布时间 2002-02-07 更新时间 2002-02-07 …

正文完
 0