Simple Posting System Multiple Vulnerabilities

No description provided by source. Exploit Title: Simple Posting System Multple Google Dork: inurl:sps.php?old= or inurl:sps.php Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Simple Posting System Final LFI/XSS/FPD Vulnerabilities

Simple Posting System suffers from multiple vulnerabilities including LFI/XSS/FPD +-- LFI --+ http://localhost/sps.php?old=../../../../../../../../../../../../../../../../../etc/passwd%00 +-- Persistent XSS --+ Vulnerable Field = "Homepage" Payload syntax: alert'XSS'; +-- FPD --+...

Simple Posting System 1.0 Final Local File Inclusion

Exploit Title: Simple Posting System Multiple Google Dork: inurl:sps.php?old= or inurl:sps.php " Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://realize.be/files/sps.tar.gz Version: 1.0 Final Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Sql injection

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0554

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0554: Undefined Security Weakness

SQL injection vulnerability in print.asp in Guo Xu Guos Posting System GPS 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

posterv2.txt

Hi Guys, This is my first time posting a vulnerability since most of my private research has been done on very small projects, many of which were never released. Anyways, down to the vulnerability: Poster version.two privilege escalation: ======================================== Poster version.tw...