Code Injection in publify/publify

Description The application doesn't check/filter the comments provided by the user before save to database. Attacker can't insert js code to steal admin's data but can insert html code, leads to many information security risks. Proof of Concept - Step 1: Go to...

xClassified 1.2 SQL Injection

Application Name : Artifectx XClassified Script Vulnerable Type : SQL Injection Infection : Yönetici ve User bilgileri çalýnabilir Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://xclassified.artifectx.com/demo/ads.php?catid=4...