================================================== ========
Exteen Blog XSS Remote Cookie Disclosure Exploit
================================================== ========


AUTHOR : CWH Underground
DATE : 22 May 2008
SITE : www.citec.us


################################################## ###
APPLICATION : Exteen Blog
VENDOR : www.exteen.com
################################################## ###

--- Vulnerable page ---
[-] http://www.exteen.com/manage/entryeditor.php (Create New Entry Page)

--- Description ---
There are 2 ways to exploit this page

1. Type "javascriptfunction(){var x = document.getElementById('mce_editor_0_parent'); x.previousSibling.style.display = 'block';x.parentNode.removeChild (x);})()" on address bar and press Enter
2. Disable javascript on your Browser and visit vulnerable page