Lucene search
K

Simple Machines Forum 1.1.6 Filter Post Bypass Vulnerability

🗓️ 05 Oct 2008 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 22 Views

SMF 1.1.6 Filter Post Bypass Vulnerability in Simple Machines Forum

Code

                                                Name: SMF 1.1.6 Filter Post Bypass
Author: WHK
WebSite: http://www.jccharry.com/

en{
 The data in a post are not filtered properly when someone enters
 statements BBCode wrong without content that a user can enter
 words banned by the system of restrictions by allowing expose
 SPAM content, and so on.
}

es{
 Los datos en un post no son filtrados adecuadamente cuando alguien
 ingresa declaraciones bbcode sin contenido probocando que un
 usuario pueda ingresar palabras prohibidas por el sistema de
 restricciones permitiendo exponer contenido SPAM, etc.
}

Example of a post / Ejemplo de un post:

------------------------------------------------------------------
[color=red][size=20pt]Fu[url][/url]ck you admin![/size][/color]

My SPAM: [b]ht[b][/b]tp://www.jc[i][/i]charry.com/[/b] >:D
------------------------------------------------------------------

Demo:
http://www.jccharry.com/archivos_publicos/smf_filter_post_bypass.png
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Oct 2008 00:00Current
7.1High risk
Vulners AI Score7.1
22