Bugtraq mailing list archives

VUBB XSS & path disclosure Vulnerabilities

From: alireza hassani <trueend5 () yahoo com>
Date: Tue, 1 Nov 2005 02:54:42 -0800 (PST)


[KAPDA::#10] - VUBB XSS & path disclosure
vulnerabilities
KAPDA New advisory

Vendor: http://www.vubb.com
Version: vubb alpha rc1
Bug: XSS & path disclosure
Exploitation: Remote with browser
Discussion:
--------------------
VuBB is a Free PHP/MySQL forum/bulletin board system. 

Vulnerability:
--------------------
XSS:
A remote user can create a specially crafted URL that,
when loaded by a target user, will cause arbitrary
scripting code to be executed by the target user's
browser. The code will originate from the site running
the VUBB software and will run in the security context
of that site.
PATH Disclosure:
 A remote user can supply a specially crafted URL to
cause the system to display an error message that
discloses the installation path and other data.

Demonstration URL :
--------------------
http://www.example.com/forum/index.php?act=newreply&t=&apos;>%3CIFRAME%20SRC=javascript:alert(%2527XSS%2527)%3E%3C/IFRAME%3E&f=6
http://www.example.com/forum/index.php?act=viewforum&f=&apos;

Solution:
--------------------
There is no vendor-supplied patch for this issue at
this time.

More Detail:
--------------------
original advisory:
http://irannetjob.com/content/view/152/28/

Credit :
--------------------
Discovered & released by trueend5 (trueend5 kapda ir)
Security Science Researchers Institute Of Iran
[KAPDA.ir] 



                
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com

Current thread:

VUBB XSS & path disclosure Vulnerabilities alireza hassani (Nov 01)