vendor site: http://enthrallweb.us/ product : ehomes bug:injection sql risk : medium injection sql : /dircat.asp?cid='[sql] /dirSub.asp?sid='[sql] /types.asp?TYPE_ID='[sql] /homeDetail.asp?AD_ID='[sql] /result.asp?city=1&cat='[sql] /compareHomes.asp?compare='[sql] /compareHomes.asp?compare=Compare&clear='[sql] /compareHomes.asp?compare=Compare&clear=Clear&adID='[sql] /result.asp?city=1&cat=2&imageField2=1&State=1&aminprice='[sql] /result.asp?city=1&cat=2&imageField2=1&State=1&aminprice=0&amaxprice='[s ql] /result.asp?city=1&cat=2&imageField2=1&State=1&aminprice=0&amaxprice=100 00000&abedrooms='[sql] xss get : /result.asp?city=[xss] /result.asp?city=1&cat=2&imageField2=1&State=[xss] laurent gaffi & benjamin moss http://s-a-p.ca/ contact: saps.audit (at) gmail (dot) com [email concealed]