Esoftpro Online Guestbook Pro Multiple Vulnerability
Posted on 04 July 2010
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Esoftpro Online Guestbook Pro Multiple Vulnerability</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>==================================================== Esoftpro Online Guestbook Pro Multiple Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' __ /'__` / \__ /'__` 0 0 /\_, ___ /\_/\_ ___ ,_/ / _ ___ 1 1 /_/ /' _ ` / /_/_\_<_ /'___ / /`'__ 0 0 / / / / \__/ \_ \_ / 1 1 \_ \_ \_\_ \____/ \____\ \__\ \____/ \_ 0 0 /_//_//_/ \_ /___/ /____/ /__/ /___/ /_/ 1 1 \____/ >> Exploit database separated by exploit 0 0 /___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : Inj3ct0r.com 0 1 [+] Support e-mail : submit[at]inj3ct0r.com 1 0 0 1 ########################################### 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 ########################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Author: L0rd CrusAd3r aka VSN [crusader_hmg@yahoo.com] Exploit Title: Esoftpro Online Guestbook Pro Multiple Vulnerability Vendor url:http://www.esoftpro.com/ Version:5.1 Published: 2010-07-4 Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com Shoutzz:- To all ICW members. ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~ Description: Online Guestbook Pro (formerly known as EGuest PRO) is an award-winning comprehensive guestbook system based on the popular guestbook system EGuest. New features including Image Verification Code, Admin Interfaces, Theme Support, Advanced Search with Highlight, Auto Web/Email Links, IP/Word Banning, Blank Line Protection, 250+ Smiley and much more. It excels any other guestbook scripts, allowing you to have a truly professional guestbook on your website. With Online Guestbook Pro :- ?? 1. You will never need to worry about someone messes your website. Comprehensive protections including: Image Verification Code, HTML Filter, IP Ban, Bad Word Filter, Blank Line Protection, Valid Email Check, Long String Conversion, Characters Limit, IP Log etc. ?? 2. You will be able to have full control over your guestbook. You can Search, Sort, Reply, Modify and Remove any entry right in the main interface. ?? 3. You will be able to custom Online Guestbook Pro easily by applying different Themes, Language Packs, Header and Footer. ?? 4. You will be able to interact with and entertain your visitors. Online Guestbook Pro supports 250+ Emoticons and Auto Hyperlinks. ?? 5. You will be notified right after a new entry is submitted. ~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~ Vulnerability: *SQL Vulnerability DEMO URL: http://www.esoftpro.com/demo/OGP/ogp_show.php?display=130&sort=&entry=10&search=[sqli] *XSS Vulnerability DEMO URL : http://www.esoftpro.com/demo/OGP/ogp_show.php?display=130&sort=&entry=10&search=&search_choice=[xss] *HTML Injection DEMO URL: http://www.esoftpro.com/demo/OGP/ogp_show.php?display=130&sort=&entry=10&search=&search_choice=[html] # 0day n0 m0re # # L0rd CrusAd3r # # <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-07-04]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>
