PhpBB Xs 2 profile.php Permanent Xss Vulnerability

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: PhpBB Xs 2 profile.php Permanent Xss Vulnerability
From: h3llcode@xxxxxxxxxx
Date: 20 Sep 2007 16:35:14 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

PhpBB Xs 2 profile.php Permanent Xss Vulnerability

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

#Found By Seph1roth    

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

[POST METHOD]

Corrupted page: profile.php?mode=editprofile&cpl_mode=profile_info

Bugged Variable: "selfdes" (Campo "Altre informazioni")

Xss: </textarea>[XSS STRING]

Prev by Date: Re: 0day: PDF pwns Windows
Next by Date: WebED-0.8999 Multiple Remote File Inclusion Vulnerability
Previous by thread: [SECURITY] [DSA 1364-2] New vim packages fix several vulnerabilities
Next by thread: WebED-0.8999 Multiple Remote File Inclusion Vulnerability
Index(es):
- Date
- Thread