TUCoPS :: HP Unsorted A :: va1667.htm

Aria-Security.com: Saba 2.0 Cross Site Scripting
Aria-Security.com: Saba 2.0 Cross Site Scripting
Aria-Security.com: Saba 2.0 Cross Site Scripting



Saba 2.0 Cross Site Scripting (JS Injection)
http://Aria-Security.com 
---------------------------------------------------------------
Saba 2.0 is a Persian Forum Script 
Dork: Powered by Saba 2.0
Vulnerable file: usercp.php

usercp.php?username=YourUserName

The above script can be inserted as Location, Yahoo ID and other fields in the usercp page.. 

 


The-0utl4w
Aria-Security Team

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH