BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Logaholic Web Analytics Software Dec 23 2007 05:29AM
malibu r hotmail com
# Logaholic Web Analytics Software

# Bug found by malibu.r

# Contact: malibu.r (at) hotmail (dot) com [email concealed]

#

[*]SQL Injection

GET /logaholic/index.php?conf=nameofprofile&from=SQL INJECTION

GET /logaholic/update.php?conf=nameofprofile&page=SQL INjection

[*]Cross Site Scripting

POST variable "newcon...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus