-----------------------------------------------------------------
n8cms 1.1 & 1.2 version

Sql İnjection And XSS

Site:http://www.nathanlandry.com

Demo:http://www.nathanlandry.com/n8cms_v1.1/

Credit : Liz0ziM
webpage:www.biyosecurity.com
Mail :liz0 (at) bsdmail (dot) com [email concealed]

--------------------------------------------------------------------

1)Sql İnjection

http://[target]/path/?dir=[sql]

http://[target]/path/?dir=home&page_id=[sql]

2)Xss [ Cross Site Scripting ]

http://[target]/path/?dir=[xss]

http://[target]/path/?dir=home&page_id=[xss]

http://[target]/path/mailto.php?userid=[xss]

----------------------------------------------------------------------

Source:

http://www.blogcu.com/Liz0ziM/307940/

http://biyosecurity.be/bugs/n8cms.txt

[ reply ]