Simple Forum PHP – Multiple Vulnerabilities

• Exploit Database
• 12 阅读

• 作者： arnab_s
  日期： 2010-08-25
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/14737/

• # Exploit Title: Simple Forum PHP (XSS/HTML Injection Vulnerabilities)
  # Date: August 25, 2010
  # Author: arnab_s
  # Software Link: http://www.simpleforumphp.com/forum/admin.php?act=topic_options
  # Price: $24.99
  
  found bug on:
  
  http://server/demo_guestbook.php?act=new
  
  details:
  
  you can insert html/javascript codes. works if Approval option on
  http://www.simpleforumphp.com/demo_forum.php act=topic_options were
  not checked.