Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion

[SA21659] CubeCart Multiple Vulnerabilities

phpAtm <= 1.21 (include_location ) Remote File Include Vulnerabilities

YACS CMS <= 6.6.1 context[path_to_root] Remote File Include Vuln

From:	Hessam Salehi <hessamx_(at)_hessamx.net>
Date:	31.08.2006
Subject:	IwebNegar v1.1 Multiple vulnerabilities

::  IwebNegar v1.1 Multiple vulnerabilities  ::
------------------------------------------------
Software     : IwebNegar v1.1
Website      : ----
Bug Discover : Hessam-x / www.hessamx.net

I. Cross Site Scripting Vulnerability
-------------------------------------------------
Parameter "comment" are not properly sanitized in "comments.php".
This can be used to post arbitrary HTML or web script code.
attacked by comments.php with field comment
& ...

II. SQL Injection Vulnerability
-------------------------------------------------
Parameter "id" is not properly sanitized before being used in SQL query.
vulnerable Page is : "comments.php".
This can be used make any SQL query by injecting arbitrary SQL code.
Attacker can be execute this url :
comments.php?id=[SQL Query]