Tuesday, April 11, 2006

Tritanium Bulletin Board 1.2.3 - XSS


Tritanium Bulletin Board 1.2.3 - XSS Vulnerabilities
--------------------------------------------------------
Software: Tritanium Bulletin Board 1.2.3
Version: 1.2.3
Type: Cross Site Scripting Vulnerability
Date: Die Apr 11 21:57:50 CEST 2006
Vendor: tritanium
Page: http://www.tritanium-scripts.com/
Risc: Low

credits:
----------------------------
d4igoro - d4igoro[at]gmail[dot]com
http://d4igoro.blogspot.com/

vulnerability:
----------------------------
register_globals On

http://[target]/index.php?faction=register&newuser_name=[XSS]
http://[target]/index.php?faction=register&newuser_email=[XSS]
http://[target]/index.php?faction=register&newuser_hp=[XSS]

solution:
----------------------------
register.php
line 26-33 : better validating

notes:
----------------------------
The vendor has been informed.

googledork:
----------------------------
"2001/2002 Tritanium Scripts"

7 Comments:

Blogger game gold said...

At one time or another, I do not have the Atlantica online Gold ; at the first time, I am not willing to buy Atlantica Gold . But I do not wonder I buy the Atlantica online money , my friend thinks that I am ill. But when I have it, it carries the magic from such a group, such a link in the world, cheap Atlantica online Gold , it is the key bring you to this world. But buy Atlantica online Gold is the best desire that I make.

Without thinking I buy some dofus kamas . I use some kamas and want to find a good group. We often buy cheap kamas together on Monday. As if it is a rule. I think it is the real friendship. buy dofus kamas is already become the essential thing in my life. So I will introduce my friends have the dofus gold , we can be consist of a group, it must be very interesting.

6:02 PM  
Blogger xuemei said...

I like play online game, I also buy ragnarok online zeny and ro zeny, the ragnarok zeny is very cheap, and use the iro zeny can buy many things, I like cheap zeny, thanks, it is very good.

I like play online game, I also buy rupees and rappelz rupees, the rappelz gold is very cheap, and use the rappelz money can buy many things, I like cheap rappelz rupees, thanks, it is very good.

6:39 PM  
Blogger huyuni said...

Lacoste Polo Shirts, , Burberry Polo Shirts.wholesale Lacoste polo shirts and cheap polo shirtswith great price. clothingol.com offers lot of 10ralph lauren polo lacoste polo shirts and lot of 20 Burberry Polo Shirts. clothingol.com offers classic fit polo shirts. polo clothingCheap Brand Jeans ShopMen Jeans - True Religion Jeans, burberry polo shirtsGUCCI Jeans, Levi's Jeans, D&G Jeans, RED MONKEY Jeans, Cheap JeansArmani Jeans, Diesel Jeans, Ed hardy Jeans, Evisu Jeans, Women JeansJack&Jones Jeans...

10:07 PM  
Blogger huyuni said...

Charlestoncheap columbia jackets. turned a pair of double plays to do the trick. spyder jacketsThe had at least one runner on in every inning but the first and outhit the RiverDogs by a 12-6 margin Lawal should be a focal point of the Yellow cheap polo shirts along with highly touted newcomer, 6-9 Derrick Favors, rated as the No. 1 power forward on the ESPNU 100. The Yellow JacketsThere are ed hardy shirts pretty ed hardy shirt for men,
ed hardy womens in the ed hardy online storedesigned by ed hardy ,many cheap ed hardy shirt ,glasses,caps,trouers ed hardy shirts on sale ,You can go to edhardyshirts.com to have a look ,you may find one of ed hardy clothing fit

10:07 PM  
Blogger huyuni said...

China Wholesale has been described as the world’s factory. This phenomenom is typified by the rise of buy products wholesalebusiness. Incredible range of products available with wholesale from china“Low Price and High Quality” not only reaches directly to their target clients worldwide but also ensures that China Wholesalers from China means margins you cannot find elsewhere and China Wholesale will skyroket your profits.

10:07 PM  
Blogger huyuni said...

A study last yearnike tn, the author in the essay read NIKE , a reporter at the Shanghai headquarters in an interview, nike chaussuressee a pr in high school to read a league plans, employees interviewed told reporters in Beijing's streets, they children to interview, the children said, "truly understand them." tn chaussures These words, if the author touches product function, brand spirit and culture is to become part of the consumer of two basic methods

10:07 PM  
Blogger franklin-marshalls said...

How Many Miles Do You Walk In A Lifetime?
Approximately a person will walk 70,000 miles in a lifetime, so it is important to purchase Ugg Sale the correct shoes.

The major importance is not to be Franklin Marshall Hoodies tempted by the latest fashion, UGG Bags the may look good but the north face store are the comfortable.
" You can tell a person by the shoes they wear "

Just think of those tory burch shoes different styles, shapes, constructions, decorations Fashion in expressed in different the north face down jacket ways gender, age, economic strata and social echelon of its Moncler Jackets wearer. Fashion can facilitate or hinder comfort health and ease of movement

11:39 PM  

Post a Comment

<< Home