nytimes.com #XSS #SQL #Upload #User #Report

###########################################################################################
#               :     : o   :             #
#           _..-:   0 :     :-.._    /    #title:nytimes.com #XSS #SQL #Upload #User #Report
#       .-''  '  `---' `---' "   ``-.     #*The Ciber War In 2013
#     .'   "   '  "  .    "  . '  "  `.   #*Informaticos
#    :   '.---.,,.,...,.,.,.,..---.  ' ;  #*2013-2018
#    `. " `.                     .' " .'  #*Grupo: The Joker Hack
#     `.  '`.   .-/|||||||\-.   .' ' .'   #*Red Social:https://www.facebook.com/TheJokerTeamHack
#      `.    `-._   \|||/   _.-' "  .'    #
#        `. "    '"--...--"'  . ' .'      #Created by: Yei zeta
#       .'`-._'    " .     " _.-'`.       #
#      .'      ```--.....--'''    ' `:    #Info: the joker hack se hace responsable de la información
#########################################################################################

Posible SQL/

http://listings.nytimes.com/BusinessDirectory/List_Listings.asp?CategoryID=BIZDIR&SubCatID=-1´´

Posible XSS

https://placead.nytimes.com/edit/user_login.asp?CategoryID=%22/%3E%3Cscript%3E%20alert


Posible Save user

http://listings.nytimes.com/+ComShare/User_Info.asp?Email=

Upload File

http://srealestate.nytimes.com/building-admin/upload.aspx?Plan=Floor

prueba:

http://srealestate.nytimes.com/SYSTEMIO/building-admin/images/538992_149832878545723_1681737139_n.jpg