Powie pFile 1.02 - '/pfile/kommentar.php?filecat' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51982/info pfile is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based authentication credential...

Pfile 1.02 Cross Site Scripting / SQL Injection

=============================== pfile1.02 Mullti Vulnerability =============================== Vendor: http://www.powie.de/wp-content/uploads/pfile1.02.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka ------------- dork : pFile 1.02 © Thomas Schmidt, 2003 -- Thomas Ehrhardt, 2002-2011 ...