----------------------------------------------------------------- n8cms 1.1 & 1.2 version Sql İnjection And XSS Site:http://www.nathanlandry.com Demo:http://www.nathanlandry.com/n8cms_v1.1/ Credit : Liz0ziM webpage:www.biyosecurity.com Mail :liz0@xxxxxxxxxxx -------------------------------------------------------------------- 1)Sql İnjection http://[target]/path/?dir=[sql] http://[target]/path/?dir=home&page_id=[sql] 2)Xss [ Cross Site Scripting ] http://[target]/path/?dir=[xss] http://[target]/path/?dir=home&page_id=[xss] http://[target]/path/mailto.php?userid=[xss] ---------------------------------------------------------------------- Source: http://www.blogcu.com/Liz0ziM/307940/ http://biyosecurity.be/bugs/n8cms.txt
