Exploit Information:
[+] Founder / Author : Nishant Soni a.k.a IndianSword
[+] Date:- 29th April 2009
[+] Criticality :- 8/10
[+] Fix: Reported to the staff, awaiting confirmation.
[+] Exploited Links:-
There is a critical XSS vulnerability in the "Search" option of ArticleBase's website. An attacker can exploit the Search Option to get the Cookies which handles the user authentication session. Which means an attacker can create a malicious search and copy the URL and send it to the person whoever he wants to hack.
Here is an example of malicious URL which will create an alert box.
Code:
http://www.articlesbase.com/find-articles.php?q=%3Cscript%3Ealert%28%22XSSed+by+TechMafias.com%22%29%3C%2Fscript%3E
Stealing Cookie With XSS
Enjoy