Vbulletin Plugin ChatBox Xss Vulnerability

Vbulletin Plugin ChatBox Xss Vulnerability Discovered By AleminKrali [email protected] www.al3m.blogspot.com Greetz : BeyazKurt,Kerem125,Cr@zyKing,Ercu145,Abo Mohammed Net Devil High Risk Vulnerability! Xss Working!note:You login site and xss try. Ex: http://www.localhost/misc.php?do=ccarc&cbt=xss...

SaBlog-X 1.5 storm library vulnerability-vulnerability warning-the black bar safety net

vendor site:http://www. vbulletin. com/ product:vbulletin 3.6.6 bug: permanent xss affected file: calendar.php risk : medium xss permanent must be loggued PoC : http://127.0.0.1/vbulletin/calendar.php?do=add&type=single&c=1 - fill up the title field with : /titlescriptalertdocument. cookie/script...

photopostvbgal-upload.txt

vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php shell via this script by renamed it's...

PhotoPost vBGallery 2.4.2 Arbitrary File Upload Vulnerability

No description provided by source. vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php...

CVE-2008-3184

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO PHPSELF or 2 the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO PHPSELF or 2 the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE:...

CVE-2008-3184

CVE-2008-3184 describes multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier (3.7.x). The vulnerabilities allow remote attackers to inject arbitrary web script or HTML via (1) PATH_INFO (PHP_SELF) or (2) the do parameter, as demonstrated b...

CVE-2008-3184

Multiple cross-site scripting XSS vulnerabilities in vBulletin 3.6.10 PL2 and earlier, and 3.7.2 and earlier 3.7.x versions, allow remote attackers to inject arbitrary web script or HTML via 1 the PATHINFO PHPSELF or 2 the do parameter, as demonstrated by requests to upload/admincp/faq.php. NOTE:...

PhotoPost vBGallery 2.4.2 - Arbitrary File Upload

vBulletin PhotoPost vBGallery v2.x Remote File Upload Found by : Cold z3ro e-mail : [email protected] Home page : www.Hack.ps ============================== exploit usage : http://localhost/Forum/$gallerypath/upload.php here the exploiter can upload php shell via this script by renamed it's...

vbulletin-adminxss.txt

====================================================================== Advisory : XSS in admin logs Release Date : July 06th 2008 Application : vBulletin Version : vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessica Hop...

vBulletin adminlog.php请求记录HTML注入漏洞

BUGTRAQ ID: 30134 vBulletin是一款开放源代码PHP论坛程序。 vBulletin管理控制面板的日志查看页面存在跨站脚本漏洞。如果用户请求了缺失的页面时，就会在管理区域创建日志，但没有过滤检查该日志的输入。脚本名称是从basenamePHPSELF获得的，操作是从REQUEST'do'获得的，这两种方式都可能导致跨站脚本攻击。 VBulletin VBulletin 3.7.2 VBulletin VBulletin 3.6.10 PL2 VBulletin --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower

====================================================================== Advisory : XSS in admin logs Release Date : July 06th 2008 Application : vBulletin Version : vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessica Hop...

vBulletin 3.7.1 - 'admincp/faq.php?Injection adminlog.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30134/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of th...

vBulletin 3.7.1 - admincpfaq.php?Injection adminlog.php Cross-Site Scripting

vBulletin 3.7.1 - admincpfaq.php?Injection adminlog.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30134/info vBulletin is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated...

vBulletin redirect参数跨站脚本漏洞

BUGTRAQ ID: 29704 vBulletin是一款开放源代码PHP论坛程序。 vBulletin管理控制面板（ACP）的登录页面没有正确地验证redirect参数，远程攻击者可以通过向论坛提交使用data: URI主题Base64编码的登录请求执行跨站脚本攻击。 VBulletin VBulletin 3.7.1 VBulletin VBulletin 3.6.10 VBulletin --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vbulletin.com/...

vbulletin365-rfi.txt

By Hasadya Raed Contact : RaeD at BsdMail dot Com email concealed - Israel Greetz : -Fairoz- ----------------------------------- vBulletin v3.6.5 Dork : "Powered by vBulletin v3.6.5. Copyright ©2000 - 2007 " ----------------------------------- Exploits :...

modcp-xss.txt

====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...

vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1: XSS in modcp index

====================================================================== Advisory : XSS in modcp index Release Date : June 17th 2008 Application : vBulletin Version : vBulletin 3.7.1 PL1 and lower, vBulletin 3.6.10 PL1 and lower Platform : PHP Vendor URL : http://www.vbulletin.com/ Authors : Jessic...

vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting

vBulletin 3.7.1 - Moderation Control Panel redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied...

vBulletin 3.7.1 - Moderation Control Panel 'redirect' Cross-Site Scripting

source: https://www.securityfocus.com/bid/29817/info vBulletin is prone to a cross-site scripting vulnerability that occurs in the MCP moderation control panel because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...