Lucene search

K

creadirector.txt

🗓️ 27 Nov 2006 00:00:00Reported by benjamin mossType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 25 Views

Vendor website http://www.creascripts.com for product creadirectory has medium risk due to SQL injection and XSS vulnerabilities

Show more
Code
`vendor site: http://www.creascripts.com/  
product:creadirectory  
bug: injection sql & xss  
risk : medium   
  
  
injection sql:  
/search.asp?search=1&submit=Search&category='[sql]  
  
  
xss:  
/addlisting.asp?cat=[xss]  
/search.asp?search=[xss]  
  
  
laurent gaffié & benjamin mossé  
http://s-a-p.ca/  
contact: [email protected]  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
27 Nov 2006 00:00Current
7.4High risk
Vulners AI Score7.4
25
.json
Report