********************************************************* ************S E C U R I T Y [4] A R A B N E T************ ************- PowerPortal XSS in Private Msg -*************** *********************- By vamp^ -*********************** *************- vampZ@Hushmail.com -*******************
===== Exploit ====== Tested on last ver after register in powerportal go to private Msg and send message title : <script>javascript:alert(document.cookie)</Script> then if the user join to him msg inbox well show Alert msg with user and password ( not hashed ) test on yourself send the msg to your inbox
