Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

THai's Shoutbox XSS (Spoofing URL) BUG

from [CorryL] Network Security [Permanent Link]
Subject: THai's Shoutbox XSS (Spoofing URL) BUG
Date: Sun, 27 Mar 2005 20:52:16 +0200 
-=[--------------------ADVISORY-------------------]=-
-=[                                                                         
     ]=-
-=[                THai's Shoutbox                                     ]=-
-=[                                                                         
     ]=-
-=[  Author: CorryL           www.x0n3-h4ck.org          ]=-
-=[                                                                         
     ]=-
-=[----------------------------------------------------]=-


-=[+] Application:    THai's Shoutbox
-=[+] Version:        not available
-=[+] Vendor's URL:   not available
-=[+] Platform:       Windows\Linux\Unix
-=[+] Bug type:       XSS spoofing url
-=[+] Exploitation:   Remote/Local
-=[-]
-=[+] Author:         CorryL  ~ corryl80[at]gmail[dot]com ~
-=[+] Reference:      www.x0n3-h4ck.org ~ irc.xoned.net #x0n3-h4ck


..::[ Descriprion ]::..

THai's Shoutbox and' a small glass showcase where the consumers of his/her
own site can leave messages,
and' very easy to use and to install, it doesn't need database mysql


..::[ Bug ]::..

this application and' he/she cuts from a bug type XSS a remote attaccker it
is able' to exploit this bug for spoofing a malignant url

..::[ Proof Of Concept ]::..

/shoutact.php?yousay=default&query=http://www.x0n3-h4ck.org
/shoutact.php?yousay=default&name=default&query=http://www.x0n3-h4ck.org
/shoutact.php?yousay=default&email=default&query=http://www.x0n3-h4ck.org
/shoutact.php?yousay=default&email=default&name=default&query=http://www.x0n
3-h4ck.org


..::[ Workaround ]::..

Vendor not avaliable



..::[ Disclousure Timeline ]::..

[27/03/2005] - No patch relase from vendor (not avaliable)
[27/02/2005] - Public disclousure

_________________________________
www.seekstat.it is your web stat
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • THai's Shoutbox XSS (Spoofing URL) BUG, CorryL <=
Previous by Date:  [SECURITY] [DSA 698-1] New mc packages fix buffer overflow, Martin Schulze
Next by Date:  Re: phishing sites report - March/2005, Paul Laudanski
Previous by Thread:  [SECURITY] [DSA 698-1] New mc packages fix buffer overflow, Martin Schulze
Next by Thread:  [SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution, Martin Schulze
Indexes:  [Date] [Thread] [Top] [All Lists]