Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities

Summary Gnew is a simple Content Management System written with PHP language and using a database server MySQL, PostgreSQL or SQLite for storage. Description Input passed via several parameters is not properly sanitised before being returned to the user or used in SQL queries. This can be exploit...

Gnew 2013.1 Cross Site Scripting / SQL Injection Vulnerabilities

Gnew 2013.1 suffers from cross site scripting and remote SQL injection vulnerabilities. Gnew v2013.1 Multiple XSS And SQL Injection Vulnerabilities Vendor: Raoul Proença Product web page: http://www.gnew.fr Affected version: 2013.1 Summary: Gnew is a simple Content Management System written with...

Gnew 2013.1 Multipe Vulnerabilities

Gnew is a simple and open-source Content Management System. Exploit Title: Gnew 2013.1 Multipe Vulnerabilities Date: 17/04/2013 Author: Elite Trojan Category:: webapps Google dork: N/A Tested on: linux + windows IVerified XSS +Vulnerable File: /users/register.php +Vulnerable Source Code: $userema...