Bugtraq mailing list archives
n8cms 1.1 & 1.2 version Sql İnjection And XSS
From: liz0 () bsdmail com
Date: 9 Mar 2006 19:57:27 -0000
----------------------------------------------------------------- n8cms 1.1 & 1.2 version Sql İnjection And XSS Site:http://www.nathanlandry.com Demo:http://www.nathanlandry.com/n8cms_v1.1/ Credit : Liz0ziM webpage:www.biyosecurity.com Mail :liz0 () bsdmail com -------------------------------------------------------------------- 1)Sql İnjection http://[target]/path/?dir=[sql] http://[target]/path/?dir=home&page_id=[sql] 2)Xss [ Cross Site Scripting ] http://[target]/path/?dir=[xss] http://[target]/path/?dir=home&page_id=[xss] http://[target]/path/mailto.php?userid=[xss] ---------------------------------------------------------------------- Source: http://www.blogcu.com/Liz0ziM/307940/ http://biyosecurity.be/bugs/n8cms.txt
Current thread:
- n8cms 1.1 & 1.2 version Sql İnjection And XSS liz0 (Mar 09)