TUCoPS :: Web :: CMS / Portals :: va1176.htm

phpAdultSite CMS flaws
phpAdultSite CMS flaws
phpAdultSite CMS flaws

Original article:

phpAdultSite CMS is a PHP-based content management system for a adult
pay site that fully supports MySQL. The code, layout, graphics of
phpAdultSite are consistent through every single page of your site.

It costs between $400 to $1100 depending on the license.

I found that this script is vulnerable to a couple of topics. After no
reply of this CMS vendors, send about two emails 1 week ago, I decided
going to full disclosure.

The problem exists on results_per_page variable. If it returns false,
it gives a DB Error output on our browser, showing up path disclosure,
sql statments that may lead to sql injections and also, it executes
XSS attacks.



It can be fixed with the sanitize of the variable.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986- AOH