Posible SQL/
http://listings.nytimes.com/BusinessDirectory/List_Listings.asp?CategoryID=BIZDIR&SubCatID=-1´´
Posible XSS
https://placead.nytimes.com/edit/user_login.asp?CategoryID=%22%2F%3E%3Cscript%3E+alert
Posible Save user
http://listings.nytimes.com/+ComShare/User_Info.asp?Email
Upload File
http://srealestate.nytimes.com/building-admin/upload.aspx?Plan=Floor
prueba:
No hay comentarios:
Publicar un comentario