| शीर्षक | Authenticated path traversal to Stored XSS and Denial-of-Service |
|---|
| विवरण | A vulnerability in phpbb allow an admin to add arbitrary JavaScript code via emoji importing, even though this action require file system access. This issue is chained with an issue in rendering the emoji that does not escape html character, which led to stored XSS.
I am currently requesting for full report disclosure so if an detailed report is needed, i will post the link to the report after disclosure.
Fix commit: https://github.com/phpbb/phpbb/commit/ccf6e6c255d38692d72fcb613b113e6eaa240aac
PoC video: https://shorturl.at/chCQT
New version release announcement: https://phpbb.com/community/viewtopic.php?t=2646991 |
|---|
| स्रोत | ⚠️ https://phpbb.com/community/viewtopic.php?t=2646991 |
|---|
| उपयोगकर्ता | shin24 (UID 55339) |
|---|
| सबमिशन | 26/10/2023 04:37 AM (3 साल पहले) |
|---|
| संयम | 02/11/2023 06:58 AM (7 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 244307 [phpBB तक 3.3.10 Smiley Pack acp_icons.php main pak क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|