On Thu, 21 Jun 2007, scott-REMOVE-@xxxxxxxxxxxxx wrote: :] There is a much more significant issue than executing an XSS if you can upload a file to a remote site... Good Raining morning... If he has access for example to /tmp directory or other directory on hosted server (from another normal (maybe ftp) account in another domain), he still can run XSS via his bug. In this case his domain can be another domain (but on the same phisical machine) and IMHO vBulletin should check path traversal. best regards Kanedaaa btw: of course if he can use ../../ to take file from path outside root path of vBulletin (like /tmp or another account dir) :] :] If this is how you plan to execute the XSS then there is nothing to fix or even do here on our part. :] :] Scott MacVicar :] Development Team, vBulletin :] -- [][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][][].. [+] You can take our lives,but you will never take our Freedom - W.Wallace [+] Peace on earth depends on the peace in the peoples hearts - Dalai Lama [+] Revolution the only solution - System of a down... [+] Dalej idac dalej dojdziesz dalej siedzac dalej siedzisz - etoe aka ok0 [-] Kanedaaa... Bohateur... Cucumber Team Member... kaneda@xxxxxxxxxxx
