PDA

View Full Version : HTML exploits on Vb 2.2.8

Xride
10-16-2003, 11:27 PM
Befor I upgraded my forum, I was running 2.2.8 and someone said that cause I had the HTML ON that they could somehow grab my cookies that store passwords, and then use that to access any account that has logged on since this HTML was "running".

First is this true?

Second, I know this is unlikely, but for my own amusement I am dieing of curiosity of how this works, I would like to try this out while the old forum still has a place to sit.
So can someone tell me how? or a link even?

Thanks
NTLDR
10-16-2003, 11:41 PM
Any version of vB that has HTML for posts/signatures/pm's etc enabled is open to be exploited.
Erwin
10-17-2003, 12:46 AM
2.2.8 or any version before 2.2.9 has security holes besides HTML vulnerabilities.

If HTML is enabled, vB in ANY version is vulnerable.
Xride
10-17-2003, 01:34 AM
How is it vulnerable though? I dont see how HTML would do anything? its not like you can install scripts or anything???
Dras
10-17-2003, 02:45 AM
But you can get HTML coding to run scripts from different sites, and to do a bunc of stuff. All sites need HTML to run anyhitng to just keep that in mind.
EvilLS1
10-17-2003, 02:51 AM
How is it vulnerable though? I dont see how HTML would do anything? its not like you can install scripts or anything???
Its possible to steal someone's cookie info by executing a simple javascript in the victims browser.
Steve Machol
10-17-2003, 04:18 AM
We are not be stupid enough to publish exactly how these exploits can be used. That would be foolish and irresponsible.
Logician
10-17-2003, 09:31 AM
We are not be stupid enough to publish exactly how these exploits can be used. That would be foolish and irresponsible.
Agreed 100% :)

On the other hand it would as wise if you restricted the VB bugs forum to customers only but unfortunately I can't seem to convince vb.com on this, already it is as much dangerous. ;)

I'm pretty sensitive on this subject, so couldn't help myself, sorry! lol..
Erwin
10-17-2003, 01:16 PM
Please don't post ways to steal cookie information here. :) Even if you know how to. Let's not teach script kiddies ways to hack vB.
Xride
10-18-2003, 06:03 AM
fair enough, didnt think anyone would show how its done.
but knowing that all versions are vunerable as long as HTML is enabled is good to know, as now I will ALWAYS turn off HTML.

Still dont really understand how you can steal the cookies from a remote script running local to the forum :ermm: ah well, i'll learn more soon, and maybe understand the why it works?...