creadirectory [injection sql & xss]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

creadirectory [injection sql & xss]

Subject: creadirectory [injection sql & xss]
Date: 21 Nov 2006 19:58:31 -0000
From: suppressed

vendor site: http://www.creascripts.com/
product:creadirectory
bug: injection sql & xss
risk : medium 


injection sql:
/search.asp?search=1&submit=Search&category='[sql]


xss:
/addlisting.asp?cat=[xss]
/search.asp?search=[xss]


laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: suppressed

Prev by Date: Link Exchange Lite [injection sql]
Next by Date: JiRos Links Manager[injection sql & xss permanent]
Previous by thread: Link Exchange Lite [injection sql]
Next by thread: JiRos Links Manager[injection sql & xss permanent]
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.