Home page logo
/

bugtraq logo Bugtraq mailing list archives

Multiple vulnerability in jupiter CMS
From: king_purba () yahoo co uk
Date: 7 Apr 2006 06:01:28 -0000

Author : KaDaL-X
email : king_purba () yahoo co uk
site : http://kandangjamur.net/

Multiple vulnerability in jupiter CMS
Vendor : http://www.highstrike.net/
version 1.1.5

Vulnerability code found in file modules/online.php

PoC:

XSS
http://xxx/jupiter/jupiter/index.php?n=modules/online&&a=1&language=1&layout=%3Ch1%3E%3Cmarquee%3Ealooo

FIX:
Create a validation function to fix the bugs, you can use htmlspecialchars() function to fix this security issue

Full Path disclosure
http://xxxx/jupiter/jupiter/modules/online.php

FIX:
Turn off display error

Note :
Sorry, but vendor site is also vuln with this bugs


  By Date           By Thread  

Current thread:
  • Multiple vulnerability in jupiter CMS king_purba (Apr 10)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]