PhpBB Xs 2 profile.php Permanent Xss Vulnerability

CVE	Category	Price	Severity
	CWE-79	Not specified	High

Author	Risk	Exploitation Type	Date
	High	Remote	2007-09-27

Our sensors found this exploit at: http://cxsecurity.com/ascii/WLB-2007090074

Below is a copy:

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

#Found By Seph1roth

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[POST METHOD]

Corrupted page: profile.php?mode=editprofile&cpl_mode=profile_info

Bugged Variable: "selfdes" (Campo "Altre informazioni")

Xss: </textarea>[XSS STRING]

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum