MyBB All Version (Add Forum) Stored XSS

2012-12-17 18:23:59
Posted by: irist.ir

# Exploit Title: MyBB All Version (Add Forum) Stored XSS
# Exploit Author: Am!r
# Homepage: http://irist.ir/forum
# Software Link: http://mybb.com/
# Security Risk : High
# Version: All Version
# Tested on: Linux

##############################################################
Stored XSS-Instructions
1.Install Mybb
2.Go to UserCP >> Forums & Posts >> Add New Forum
3.Insert Your Xss Script In Title And Save New Forum .ex. "><script>alert("Www.IrIsT.Ir")</script>
4.Visit your Forum

See Image :
http://uploadtak.com/images/y98_irist.jpg
##############################################################

# Greats : B3HZ4D - Mikili - Dead.Zone - C0dex - TaK.FaNaR - BestC0d3r - Beni_Vanda - one hacker alone
# 0x0ptim0us - m3hdi - F@rid - dr.tofan - skote_vahshat - Mr.Xpr - M.R.S.CO - Mr.Cicili - Dj.TiniVini
# H-SK33PY - Immortal Boy - Noter - & All Members In Www.IrIsT.Ir/forum & Www.Datacoders.Org

Fixes

No fixes

In order to submit a new fix you need to be registered.