Search (keywords):  SOFT ARTICLES TIPS & TRICKS SECURITY LINKS NEWS MAN DOCUMENTATION

<< Previous INDEX Search src / Print Next >>

Date: 26 Nov 2006 20:43:43 -0000
From: [email protected]
To: [email protected]
Subject: ClickGallery Sql Injection
X-Virus-Scanned: antivirus-gw at tyumen.ru

#Aria-Security Team Advisory
#<www.Aria-security.Com For English >
#<www.Aria-Security.net For Persian >
#-----------------------------------------------------------
#Software: Click Gallery
#Method: SQL Injection  And XSS
#Vendor:ClickGallery.net
#
#PoC:
#
#
#http://target/view_gallery.asp?gallery_id=809¤tpage=&#091;SQL Injection]
#http://target/view_gallery.asp?gallery_id=&#091;SQL injection]
#http://target/download_image.asp?image_id=&#091;SQL Injection]
#http://target/gallery.asp?currentpage=&#091;SQL Injection]
#http://target/view_recent.asp?currentpage=&#091;SQL Injection]
#http://taget/gallery.asp?currentpage=2&orderby=&#091;SQL Injection]
#
#You are able to use XSS by searching your script .
#example in Search: <script>alert('Aria-Security')</script>
#
#Contact: [email protected]

<< Previous INDEX Search src / Print Next >>

Партнёры:

Хостинг: