BugTraq
MyBB 1.10 'newthread.php' < CrossSiteScripting > Apr 09 2006 09:14PM
o y 6 hotmail com
MyBB 1.10 'newthread.php' < CrossSiteScripting >

[ Devil-00 | D3vil-0x1 ]

[*] Conditions [*]
1- your unregisterd user
2- you have permissions to do newthread

[---------------]

do newthread with this username :-

<script>alert(document.cookie);</script>D3vil-0x1

Then Preview it ;)

[---------------]

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus