Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues
From: saps.audit@xxxxxxxxx
Date: 4 Nov 2006 18:24:33 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

there's also one injection sql in :
/default.asp?nav=38x47&contid=-80

and an error sql here :
/default.asp?nav=38x47&contid=606&lid=-20




http://sap.ca/

Prev by Date: [USN-377-1] NVIDIA vulnerability
Next by Date: IF-CMS multiples XSS vunerabilities
Previous by thread: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues
Next by thread: [OpenPKG-SA-2006.028] OpenPKG Security Advisory (php)
Index(es):
- Date
- Thread