• info
• discussion
• exploit
• solution
• references

My Little Homepage Products BBCode Link Tag Script Injection Vulnerability


No exploit is required.


BBCode example have been provided:

[link=javascript:alert(123)]Link[/link]
[link]javascript:alert(123)[/link]