SummaryMySQLguest by "Allwebscripts is a guestbook script that uses MySQL to store messages".1 ~/ ^) t9 }% n" V1 }8 p" b
. M* [& B% S9 X# x' `
Allwebscripts' MySQLguest is vulnerable to a source code injection vulnerability in the AWSguest.php page. The vulnerability occurs as fields in the AWSguest.php page do not adequately sanitize HTML, script or PHP code. e$ P- z, ~+ i. w) B
/ C/ w4 r* I5 J) F
DetailsIn the AWSguest.php page, any of the following fields can be used to inject arbitrary HTML, JavaScript or PHP: "Name", "Email", "Homepage" and "Comments".
( ?) ^% Z1 u; J% V! { S5 w% {1 P- M; @$ G1 N$ I
Exploit:& P; o+ V7 P% x+ X
E-mail: <?php echo <p>Hello World</p>: R0 t4 p8 n! P: k" j
Homepage: <script language=javascript>alert ("Messagebox")/ i Z( j; X* Y- v8 P; r
Comments: <IFRAME SRC=www.computerknights.org>. v+ g, D# j0 k: ]1 B) y
* v/ j Q/ h9 X" f; ] Additional informationThe information has been provided by BliZZard.
IP卡
狗仔卡
发表于 2004-10-6 09:52
转播
淘帖
分享
收藏
支持
反对
微信
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
抢沙发
显身卡
