Non Persistent XSS in Samepoint Social Media Search Engine

Title         : Non Persistent XSS in Samepoint Social Media Search Engine
Found by : p0pc0rn 24/02/2011

POC
--------
http://www.samepoint.com/index.php?q=[XSS]


All parameters can be xss'ed.

Update: Fixed

Non-Persistent in Tuugo Free company and business search engine

Title : Non-Persistent in Tuugo Free company and business search engine
Web : http://www.tuugo.com
Found by: p0pc0rn 23/2/2011

XSS
---
Tuugo Search Engine is Vulnerable Non Persistent XSS at parameter search=&nearto=

POC
---

http://site.com/CompaniesForProductByLoc?search=[XSS]&nearto=[XSS]

SQL and XSS in DIY Web CMS

SQL and XSS in DIY Web CMS

found by : p0pc0rn 22/2/2011
web : http://www.mydiyweb.com.my
dork : intext:"powered by DiyWeb"

SQL - Microsoft JET Database Engine error
-----------------------------------------

http://site.com/template.asp?menuid=[SQL]
http://site.com/viewcatalog.asp?id=[SQL]
http://site.com/xxx.asp?id=[SQL]

XSS
---
http://site.com/diyweb/login.asp?msg=[XSS] -- login page

http://www.exploit-db.com/exploits/16205/

thanks
-p0pc0rn-

CMS Powered by sen9.com Multiple Vulnerabilities

CMS Powered by sen9.com Multiple Vulnerabilities

SQL

http://site.com/productDetail.php?P_Id=[sql]
http://site.com/subPage.php?SP_Id=[sql]
http://site.com/videoDetail.php?V_Id=[sql]
http://site.com/journal.php?J_Id=[sql]

screenshot:

XSS

http://site.com/x.php?V_Name=[xss]&SE_Name=[xss]

Directory Listing


there are more vuln found.
I just highlight the high risk vuln

status:reported

thanks
-p0pc0rn-

How to Enable Telnet in Windows 7

1 - Start > Control Panel

2 - Click Programs


3 - At the "Programs and Features", click “Turn Windows features on or off”


4 - New box will pop up..scroll down to find "Telnet Client"..tick and OK! DONE!


alternatively

using cmd prompt

start / w pkgmgr /iu:"TelnetClient"

How to Play Snake in Youtube for fun!

How to Play Snake in Youtube

1 - Go to youtube.com

2 - Find any video

3 - Scroll the timeline to 0:00 and click pause

4 - Hold left arrow button on your keyboard for a while...then push up arrow button..

5 - The snake will appear and u are on game! :D

Mark Zuckerberg's Facebook Fanpage Was Hacked

"Let the hacking begin: If facebook needs money, instead of going to the banks, why doesn't Facebook let its users invest in Facebook in a social way? Why not transform Facebook into a ‘social business' the way Nobel Price winner Muhammad Yunus described it? http://bit.ly/fs6rT3 What do you think? #hackercup2011"

Read more: http://techland.time.com/2011/01/26/mark-zuckerbergs-facebook-page-was-hacked-everybody-panic/#ixzz1CI7IV8pQ

How To Setup Static IP Address in Fedora 14

First go to

System > Preferences > Network Connections

Choose your device which in my case I'm using wired.

Choose and click edit.


Then go to IPv4 Setting tab.
And set the Method : Manual.
Click Add to put your static IP.
Put your desire Dns Server.

Then finally click apply.

Done :)

FOTOROLL Search Application Vulnerable to XSS

FOTOROLL Search Application Vulnerable to XSS

# Found : by p0pc0rn
# Date : 07 - 01 - 2011
# Website : http://fotoroll.com


XSS
====

www.site.com/search?src=xx&q=[XSS]



Screenshot
==========



http://img443.imageshack.us/img443/7476/screenshotuma.png
http://img694.imageshack.us/img694/8748/screenshot1nf.png


Status
=======
Reported


Thanks

p0pc0rn

Multiple Non-Persistent XSS in lyris.pl

Multiple Non-Persistent XSS in lyris.pl

Found : by p0pc0rn on 06/01/2011
Website : http://www.lyris.com/

XSS 1
======

www.site.com/a/lyris.pl?enter=[XSS]

XSS 2
======

www.site.com/b/lyris.pl?visit=[XSS]


Screenshot
==========



http://img408.imageshack.us/img408/5210/screenshotqrz.png
http://img524.imageshack.us/img524/9601/screenshot1omg.png

Status
======
Reported on 06/01/2011

Thanks

p0pc0rn

Electronic Thesis and Dissertation Library Non Persistent XSS

Electronic Thesis and Dissertation Library Non Persistent XSS

found : 5/01/11 by p0pc0rn

XSS 1
======

http://www.site.com/a/b/first_letter=[XSS]

XSS 2
======

http://www.site.com/a/b/login
POST:[XSS]


Screenshot
===========


http://img802.imageshack.us/img802/9625/screenshotos.png
http://img140.imageshack.us/img140/789/screenshot1we.png

Thanks

p0pc0rn