OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS

[vampire_chiristof]

vendor:


http://www.oneorzero.com/


vuln :


http://[host]/supporter/index.php?t=tupd&id=[SQL]


http://[host]/supporter/index.php?t=tupd&id=[XSS]



Author : Vampire


[EMAIL PROTECTED]


Homepage : Www.HackerZ.iR


Www.H4ckerZ.Com


Iran HackerZ Security Team