vubbXSS.txt

`  
[KAPDA::#10] - VUBB XSS & path disclosure  
vulnerabilities  
KAPDA New advisory  
  
Vendor: http://www.vubb.com  
Version: vubb alpha rc1  
Bug: XSS & path disclosure  
Exploitation: Remote with browser  
Discussion:  
--------------------  
VuBB is a Free PHP/MySQL forum/bulletin board system.   
  
Vulnerability:  
--------------------  
XSS:  
A remote user can create a specially crafted URL that,  
when loaded by a target user, will cause arbitrary  
scripting code to be executed by the target user's  
browser. The code will originate from the site running  
the VUBB software and will run in the security context  
of that site.  
PATH Disclosure:  
A remote user can supply a specially crafted URL to  
cause the system to display an error message that  
discloses the installation path and other data.  
  
Demonstration URL :  
--------------------  
http://www.example.com/forum/index.php?act=newreply&t='>%3CIFRAME%20SRC=javascript:alert(%2527XSS%2527)%3E%3C/IFRAME%3E&f=6  
http://www.example.com/forum/index.php?act=viewforum&f='  
  
Solution:  
--------------------  
There is no vendor-supplied patch for this issue at  
this time.  
  
More Detail:  
--------------------  
original advisory:  
http://irannetjob.com/content/view/152/28/  
  
Credit :  
--------------------  
Discovered & released by trueend5 (trueend5 kapda ir)  
Security Science Researchers Institute Of Iran  
[KAPDA.ir]   
  
  
  
  
__________________________________   
Yahoo! FareChase: Search multiple travel sites in one click.  
http://farechase.yahoo.com  
`