Exploit MiniBB 1.2 - Cross-Site Scripting

[Exploiter]

EDB-ID

21427

Проверка EDB

1. Пройдено

Автор

FROG

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

null

Дата публикации

2002-04-17

source: https://www.securityfocus.com/bid/4619/info

MiniBB is web forum software. It is written in PHP and will run on most Unix and Linux variants as well as Microsoft Windows operating systems.

MiniBB does not filter script code from URL parameters, making it prone to cross-site scripting attacks.

This may enable a remote attacker to steal cookie-based authentication credentials from legitimate users of a website running MiniBB. 

http://target/forums/index.php?action=search&searchFor="><script>alert("test")</script >