<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7651.51">
<TITLE>[x0n3-h4ck] myBloggie 2.1.5 XSS exploit</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>-=[--------------------ADVISORY-------------------]=-<BR>
<BR>
myBloggie 2.1.5 <BR>
<BR>
Author: CorryL [corryl80@gmail.com] <BR>
-=[-------------------------------------------------------]=-<BR>
<BR>
<BR>
-=[+] Application: myBloggie<BR>
-=[+] Version: 2.1.5<BR>
-=[+] Vendor's URL: <A HREF="http://mywebland.com/download.php?id=19">http://mywebland.com/download.php?id=19</A><BR>
-=[+] Platform: Windows\Linux\Unix<BR>
-=[+] Bug type: Cross-Site Script<BR>
-=[+] Exploitation: Remote<BR>
-=[-]<BR>
-=[+] Author: CorryL ~ corryl80[at]gmail[dot]com ~<BR>
-=[+] Reference: www.x0n3-h4ck.org<BR>
-=[+] Virtual Office: <A HREF="http://www.kasamba.com/CorryL">http://www.kasamba.com/CorryL</A><BR>
-=[+] Irc Chan: irc.darksin.net #x0n3-h4ck <BR>
<BR>
<BR>
..::[ Descriprion ]::..<BR>
<BR>
myBloggie is considered one of the most simple,<BR>
user-friendliest yet packed with features Weblog system available to date.<BR>
Built using PHP & mySQL, web most popular scripting language &<BR>
database system enable myBloggie to be installed in any webservers.<BR>
Template based designed enable you to customize myBloggie easily &<BR>
to create your own unique blog identity.<BR>
It's also super fast due to it size, set-up easily &<BR>
most of all the editor with BBcode supported buttons with prepost<BR>
preview make composition some much easier<BR>
<BR>
<BR>
<BR>
..::[ Proof Of Concept ]::..<BR>
<BR>
<A HREF="http://remote-server/index.php/">http://remote-server/index.php/</A>>">[xss]<BR>
<A HREF="http://remote-server/login.php/">http://remote-server/login.php/</A>>">[xss]<BR>
<BR>
<BR>
<BR>
<BR>
<BR>
**************<BR>
Registrati ad Alice Basic e scarica Alice Messenger,<BR>
il nuovo instant messenger che ti fa chattare GRATIS con i tuoi amici!<BR>
Per maggiori informazioni vai su:<BR>
<A HREF="http://adsl.alice.it/servizi/alicebasic.html?pmk=psmail_foot01">http://adsl.alice.it/servizi/alicebasic.html?pmk=psmail_foot01</A></FONT>
</P>
</BODY>
</HTML>