|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
n8cms 1.1 & 1.2 version Sql İnjection And XSS
liz0
bsdmail.com
Date: Thu Mar 09 2006 - 13:57:27 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
-----------------------------------------------------------------
n8cms 1.1 & 1.2 version
Sql İnjection And XSS
Site:http://www.nathanlandry.com
Demo:http://www.nathanlandry.com/n8cms_v1.1/
Credit : Liz0ziM
webpage:www.biyosecurity.com
Mail :liz0bsdmail.com
--------------------------------------------------------------------
1)Sql İnjection
http://[target]/path/?dir=[sql]
http://[target]/path/?dir=home&page_id=[sql]
2)Xss [ Cross Site Scripting ]
http://[target]/path/?dir=[xss]
http://[target]/path/?dir=home&page_id=[xss]
http://[target]/path/mailto.php?userid=[xss]
----------------------------------------------------------------------
Source:
http://www.blogcu.com/Liz0ziM/307940/
http://biyosecurity.be/bugs/n8cms.txt
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]