Bugtraqmailing list archives
CSS in phpBB 1.4.4
From: "SandI]" <agent050 () sama ru>
Date: Wed, 15 Dec 2004 23:23:55 +0400
I found a bug in quite old forum system phpBB 1.4.4phpBB 1.4.4 is vulnerable to Cross Site Scripting Attack.[Vulnerable]You can put vbscript in [img] bbcode tags.For example:[img]vbscript: alert(document.cookie)[/img]Author: Gurjanov Ilia or Netagent050 () sama ru
Current thread:
- CSS in phpBB 1.4.4SandI] (Dec 15)
- <Possible follow-ups>
- RE: CSS in phpBB 1.4.4Paul Owen (Dec 15)