Simple Machine Forum 1.0.8 XSS in Administration

[insanity]

Simple Machine Forum 1.0.8 XSS in Administration
----------------------------------------------------------------------------------------------------------------------

Author: insanity

E-mail: insanity[at]darkers [dot] com [dot] br


Forum Controls
-------------------------

Edit Forum News

Você pode injetar Java Script:



ou



Forum Configuration
-------------------------

Edit Registration Agreement



ou




Video:

http://insanity.netsons.org/vtutorial/smf



/* insanity */