$username Posted May 1, 2008 Share Posted May 1, 2008 Hello All, I have made a thing for some small business to use to keep up with their business needs handling Customer relations. It is far from being complete and there are some bugs, but its getting closer to being done. I was just wondering if I could get some people to check it out. Any feedback is much appreciated. I also know that the search does not work. I am currently working on that. I will keep this alive for about 1 - 2 weeks depending on how much of a drive I get. http://test.ntwnet.com/company/login.html Username = test@test.com Password = password I have also just added it to the values so you should be able to "auto" login Link to comment Share on other sites More sharing options...
Coreye Posted May 1, 2008 Share Posted May 1, 2008 Cross Site Scripting (XSS): http://test.ntwnet.com/company/index.php?vconid=1&conid="><marquee><h1>Corey Cross Site Scripting (XSS): You can submit ">code when editing a profile. Cross Site Scripting (XSS): You can submit ">code when creating an account. Cross Site Scripting (XSS): You can submit ">code when creating a case. Cross Site Scripting (XSS): You can submit ">code when creating a contact. SQL Error: When adding " to the invoices. You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\"> Link to comment Share on other sites More sharing options...
allistera Posted May 1, 2008 Share Posted May 1, 2008 You can delete all the accounts like so: http://test.ntwnet.com/company/index.php?deleteuser=1,2,3,4,5,6,7 etc&userprofile=17 Link to comment Share on other sites More sharing options...
Recommended Posts