MiniBB 1.2 – Cross-Site Scripting

MiniBB 1.2 – Cross-Site Scripting

漏洞ID 1053577 漏洞类型
发布时间 2002-04-17 更新时间 2002-04-17
图片[1]-MiniBB 1.2 – Cross-Site Scripting-安全小百科CVE编号 N/A
图片[2]-MiniBB 1.2 – Cross-Site Scripting-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/21427
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/4619/info

MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting attacks.

This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a website running MiniBB. 

http://target/forums/index.php?action=search&searchFor="><script>alert("test")</script >

相关推荐: Caldera OpenServer Port Scan InetD Denial of Service Vulnerability

Caldera OpenServer Port Scan InetD Denial of Service Vulnerability 漏洞ID 1102509 漏洞类型 Design Error 发布时间 2002-02-07 更新时间 2002-02-07 …

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享