I am continue informing you about multiple vulnerabilities in XAMPP.
-----------------------------
Advisory #7
-----------------------------
CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
-----------------------------
URL: http://websecurity.com.ua/3285/
-----------------------------
Timeline:
> I am continue informing you about multiple vulnerabilities in XAMPP.
>
> -----------------------------
> Advisory #7
> -----------------------------
> CSRF, SQL Injection and Full path disclosure vulnerabilities in XAMPP
> -----------------------------
> URL: http://websecurity.com.ua/3285/
> -----------------------------
> Timeline:
>
no more support of this plugin, after his site on Joomla was hacked).
21.05.2010 - disclosed at my site.
-----------------------------
Details:
These are SQL Injection and Full path disclosure vulnerabilities.
SQL Injection:
http://site/index2.php?option=ds-syndicate&version=1&feed_id=-1%20or%20version()=5
