Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key).	Yabbse XSS Vulnerability in news_template.php 5 Jan. 2003    Summary YaBB SE is a PHP/MySQL port of the popular forum software YaBB (yet another bulletin board). A cross site scripting vulnerability in the product allows a remote attacker to cause the web page to insert malicious HTML and JavaScript into existing web pages.   Credit: The information has been provided by Mindwarper. Website Security Scan Code Vulnerability Test Network Assessment Tool Detect hidden vulnerabilities Exhaustive automated testing Real-time, continuous security Get guidance from professionals of internal or 3rd party code. scanning for your entire network    Details Protect your website! Use an External Vulnerability Scanner! Nothing to install. First report in 1 hour! www.beyondsecurity.com/vulnerability-scanner Vulnerable systems:  * Yabbse version 1.5.0 Example: http://victim/yabbse/news_template.php?news_icon=<scr!pt>alert(document.cookie);</scr!pt> Impact: This can allow attackers to steal Yabb's cookies from other users and hijack their accounts.  Comments:  Add new comment:  Subject:  Name/Nick/Email:          Chars Left:	All Sections Security News Unix focus Exploits Tools Windows focus Security Reviews  Related Articles Apple Webkit Blink Event Dangling Pointer Remote Code Execution Vulnerability Microsoft Virtual PC Hypervisor Memory Protection Vulnerability Apple WebKit HTML Element Use After Free Vulnerability Apple WebKit CSS Run-in Attribute Rendering Vulnerability Publique! CMS and SQL Injection Vulnerabilities Files2Links F2L-3000 SQL Injection Vulnerability HP-UX Running Apache Data Injection and DoS Vulnerability MIT krb5 KDC denial of service in cross-realm referral processing AproxEngine Multiple Vulnerabilities APC Switched Rack PDU XSS Vulnerability HP-UX Running OpenSSL Unauthorized Data Injection and Denial of Service HP OpenView NNM snmpviewer.exe CGI Host Header Stack Overflow Vulnerability HP OpenView NNM ovwebsnmpsrv.exe OVwSelection Stack Overflow Vulnerability HP-UX Running VRTSweb Remote Execution of Arbitrary Code and Privilege Escalation FreeBSD SSL and TLS Session Renegotiation vulnerability  Featured Articles Microsoft Embedded OpenType Font Engine Heap Buffer Overflow (MS09-029) Virtualmin Multiple Vulnerabilities Microsoft WordPad Word97 Converter Stack Buffer Overflow Vulnerability (MS09-010) WordPress Unchecked Privileges in admin.php and Multiple Information Disclosures Microsoft PowerPoint Conversion Filter Heap Corruption Vulnerability (MS09-017) Adobe Shockwave Player Director File Parsing Pointer Overwrite Mozilla Firefox Java Applet Loading Vulnerability
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © 1998-2010 Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®