Nconf 1.3 SQL Injection / Cross Site Scripting Vulnerabilities

Nconf version 1.3 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，email protected Software Link: http://sourceforge.net/projects/nconf/files/nconf/...

Nconf 1.3 - Multiple SQL Injections

Nconf 1.3 - Multiple SQL Injections Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage:...

Nconf 1.3 SQL Injection / Cross Site Scripting

Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage: http://security-geeks.blogspot.com/...