PhpBB Xs 2 profile.php Permanent Xss Vulnerability

2007-09-21T00:00:00
ID SECURITYVULNS:DOC:18036
Type securityvulns
Reporter Securityvulns
Modified 2007-09-21T00:00:00

Description

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Found By Seph1roth

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[POST METHOD]

Corrupted page: profile.php?mode=editprofile&cpl_mode=profile_info

Bugged Variable: "selfdes" (Campo "Altre informazioni")

Xss: </textarea>[XSS STRING]