xss on discuzx

Safaali

I dont want to upgrade my forum, because I have done some modifications, and there are no major difference between x 1.5 and x 2. but there is a bug report.

could you help me to fix this?
http://0xsec.org/?p=303

vot

The vulnerability report:

A small collection of Discuz X XSS vulnerability

/ **
* Title: Discuz X Series XSS vulnerability of small collections
* Author: sogili @ 0xsec
* From: 0xsec.org
* Website: 0xsec.org & sogili.com
** /

Some versions of Discuz X have some small XSS vulnerability.

Involved versions: Discuz X1.0 & x1.5.
Plus QQ bookmark XSS one.

sogili complain when playing with small achievements.


Discuz x1.0 personal space template customization XSS

Several times in front of almost all the problems the img tag:
After landing -> enter the personal space -> dress space -> Add Template -> check the free templates 1 ->



But this may not impact the scope of previous big, because it is a personal space, but one thing better than the previous point is the place (IMG code supports a maximum 1000 words), so that's not so hard to reduce the length.

Discuz! X1.5 post Xss

Type when posting
[img]javascript:alert(/sogili/)[/img]

Discuz X1.5 personal home-based stored XSS
Into the profile page
to submit comments [img]javascript:alert(/sogili/)[/img]

QQ bookmark Xss

http://shuqian.qq.com/login/auth?jump=1&sURL=javascript:alert(0)

Published 02/19/2011
Filed in Web security and tagged Xss

vot

I have tested this report.
This XSS does not work at my latest versions (1.5 & 2.0).
You can check it by yourself.

Safaali

thanks man. I have tested it on Post editor and no problem seen. But I could not understand where is this one?

Discuz X1.5 personal home-based stored XSS
Into the profile page
to submit comments

vot

But I could not understand where is this

User space - > Write to Wall.