[Full-disclosure] Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability
Mustafa Can Bjorn IPEKCI
nukedx at nukedx.com
Sun May 28 14:51:58 BST 2006
Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability
Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI
Date: 27/05/06 04:26 PM
MSN/Email: nukedx at nukedx.com
Vendor: ASPBB (www.aspbb.org)
Version: 0.52 and prior versions must be affected.
About: Via this method remote attacker can make malicious links for
when victim clicks this links victim's browser would be inject with XSS.
GET -> http://[site]/perform_search.asp?search=">[XSS]
* 27/05/2006: Vulnerability found.
* 27/05/2006: Contacted with vendor and waiting reply.
Original advisory can be found at: http://www.nukedx.com/?viewdoc=32
Full-Disclosure is hosted and sponsored by Secunia.