bugtraq - Multiple Vulnerabilities in Led-Forums

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20031030160433.23727.qmail@sf-www1-symnsj.securityfocus.com>
Date: 30 Oct 2003 16:04:33 -0000
From: ProXy - <proxy@...luded.org>
To: bugtraq@...urityfocus.com
Subject: Multiple Vulnerabilities in Led-Forums

Product: Led-Forums 
Versions: Beta 1 
Vulnerability: XSS- and redirection-Bug 
Date: October 30, 2003 
Discovered by: ProXy <proxy@...luded.org> 

1. - XSS-Bug 

The Welcome-Message of the Led-Forums software could be changed by everybody. 
Normal Text, HTML and Javascript it's all allowed! :) 

eg: 
  http://host/~path/index.php?top_message=&lt;script&gt;alert(document.cookie)&lt;/script&gt; 
  http://host/~path/index.php?top_message=<h1>OWNED?%20*g*</h1> 

--
2. - Redirection-Bug 

HTML-tags are allowed in topic-names as well as Javascript. 
So if anybody insert the following JS-code in the topic-field of a new thread 
the complete forum-category would be redirected to the adress the attacker indicates. 

&lt;script&gt;window.location='http://www.excluded.org'&lt;/script&gt; 

- ProXy 
- http://www.excluded.org