Spooky Login Multiple HTML Injection Vulnerability



This is a user management program where the users can register themselves by providing their username and passwords for protecting their webcontents. This program provide features like remembering login with cookies, automatic login, extended user info, expire user by date, admin can activate manually, registration page, tracks user logins, user can upload file, user can alter and add fields for user registration, users can login after expiry and more.


Advisory: Spooky Login Multiple HTML Injection Vulnerability


Hackers Center Security Group (http://www.hackerscenter.com)
Doz's Advisory


Risk: Medium to High
Vendor: www.spookylogin.com
Class: Input Validation Error


Vulnerable: 2.7

Exploit: Attackers can exploit these issues via a web client.


Remote: Yes
Local: Yes


XSS Hole:

/spooky/login/login.asp

/spooky/login/register.asp



SQL Hole"


/spooky/login/register.asp?UserUpdate=[sql]


/includes/a_register.asp



Relevant Pages

  • [NEWS] Wonderware SuiteLink Denial of Service Vulnerability
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... Vendor Information, Solutions and Workarounds ... Core sends the advisory draft to Wonderware support team. ...
    (Securiteam)
  • [NEWS] Vulnerability Issues in Implementations of the H.323 Protocol (Generic)
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... discovered a number of implementation specific vulnerabilities in the ... The severity of these vulnerabilities varies by vendor. ...
    (Securiteam)
  • Re: Malicious use of grc.com
    ... addressed or referenced in the advisory. ... So notifying the vendor in order to get a needed patch ... to monitor all "public settings". ... GeoCities - quick and easy web site hosting, ...
    (Vuln-Dev)
  • [NT] w3wp DoS
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... 1/12/2006 - Vendor requested for additional info ... recv(conn_socket, szBuffer, 256, 0); ...
    (Securiteam)
  • Vulnerability Disclosure Formats (was "Re: Funny article")
    ... Common Advisory Interchange Format ... Vendor Status: [was the vendor informed? ... vulnerability a short title, ...
    (Bugtraq)