Bugtraq mailing list archives

Re: New Include Redirect Bug XSS All vBulletin v 3.x.x

From: scott-REMOVE- () vbulletin com
Date: 21 Jun 2007 15:09:46 -0000

There is a much more significant issue than executing an XSS if you can upload a file to a remote site...

If this is how you plan to execute the XSS then there is nothing to fix or even do here on our part.

Scott MacVicar
Development Team, vBulletin

Current thread:

New Include Redirect Bug XSS All vBulletin v 3.x.x stormhacker (Jun 20)
- <Possible follow-ups>
- Re: New Include Redirect Bug XSS All vBulletin v 3.x.x scott-REMOVE- (Jun 21)
  - Re: New Include Redirect Bug XSS All vBulletin v 3.x.x kaneda (Jun 21)
- Re: Re: New Include Redirect Bug XSS All vBulletin v 3.x.x scott-REMOTE- (Jun 22)