PDA

View Full Version : Exploit on vbulletin4


Duckface
08-06-2015, 02:25 PM
Wth, a member just made a post like this:

http://spawnscape614.co.uk/forums/showthread.php?3383-CLICK-ME-(this-is-a-test)

I checked the code and it seems that this has been added into the actual post:

<meta name="keywords" content="http://images.sky-map.org/star_image/000/000073.jpeg, click" />
<meta name="description" content="http://images.sky-map.org/star_image/000/000073.jpeg" />

<title> CLICK ME (this is a test)</title>
<link rel="canonical" href="showthread.php?3383-CLICK-ME-(this-is-a-test)" /

How has the user done that to his threads?

Could anyone please help me, thanks.

--------------- Added 1438878988 at 1438878988 ---------------

I found what it is, if a user does this:

https://vborg.vbsupport.ru/external/2015/08/4.jpeg

--------------- Added 1438879049 at 1438879049 ---------------

https://vborg.vbsupport.ru/external/2015/08/27.jpg

Lynne
08-06-2015, 02:38 PM
I'm not sure what it is you are asking about. The user made a post with an image. The meta tags are created from the post. So, the meta tags have that image link in them. Is that what you are trying to point out?