Multiple vulnerabilities in Athree CMS

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL DB Structure Extraction, SQL Injection, Cross-Site Scripting и Denial of Service уязвимостях в системе Athree CMS. SQL DB Structure Extraction: http://site/?p=1;c=1?;s=1 SQL Injection: http://site/?p=1;c=1;s=120and20version3E4...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting. Athree CMS: information leak, SQL injection, DoS...