Ultra Light Forum – Persistent Cross-Site Scripting

• Exploit Database
• 9 阅读

• 作者： cr4wl3r
  日期： 2013-02-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/24501/

• # Ultra Light Forum Persistant XSS Vulnerability
  # By cr4wl3r http://bastardlabs.info
  # http://bastardlabs.info/advisories/?id=86
  # Script: http://sourceforge.net/projects/ultralightforum/files/
  # Tested: Win 7
  
  Description :
  Ultra Light Forum developed in PHP and MySQL as a standalone forum with high speed, high user-friendliness. 
  User can create, delete topic, can reply to others topic. 
  The forum also comes with poll, where user can vote. To know more try UL Forum.
  
  Proof of Concept :
  Choose profile settings, and put the messages box with 
  <script>alert(document.cookie)</script>
  And update your profile
  So if any user can view you profile, the script will be execute
  
  Demo:
  http://bastardlabs.info/demo/ultraforum1.png
  http://bastardlabs.info/demo/ultraforum2.png