There is a Permanent-type Cross-Site Vulnerability in =93Personal Signature=94 in all version of Discuz!. It can be written by the worm!
 
 
Discuz! do not filter the Malicious code when user enter their personal signature=2C attacker can enter the xss code=2C Discuz! will save and run it! It maybe lead the propagation of worm!
 
 
 

For example:
 
we can register an user=2C and enter the xss code to our personal signature! 
 
like:
 
 
 
Vulnerable:  Discuz! <=7.2    all version!
 
 
 
 
Liscker
2010.03.24 		 	   		  
</b></font></pre></tt></body></html>


<!-- google_ad_section_end -->
<p><center>

<p></center>
<center><a href="/firefox.htm">TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).</a></center>
<font size=1><center>Site design & layout copyright © 1986-2024 AOH</font>
</center>
<br><center><IMG SRC="http://artofhacking.com/cgi-bin/sc/sc.cgi?acct=tucops&font=payphone-med"></center>
<p>
</body>
</html>