Wordpress search query xss

Wordpress nextGEN gallery XSS (Cross site scripting) Cookie Stealing Vulnerability

http://digitalpbk.blogspot.com/2009/07/wordpress-nextgen-gallery-xss.html sites are printed directly onto the html tag on the pages. So if you try something likenext-gen-gallery/?album=1&pid;=3&gallery=2(XSS HOLE CAN BE HERE)the Title becomes Picture 3 « Album 1 « Gallery 2(XSS HOLE CAN BE HERE) « Next Gen Gallery « xxxxxxxxxxx WordPress DemoSo we can insert our own custom HTML into the get query to include harmless HTML tags and dangerous SCRIPT tags to allow for Cross Site Scripting. Since Wordpress is in PHP, by default ...

XSS on JustDial.com

http://digitalpbk.blogspot.com/2007/04/xss-on-justdialcom.html XSS on JustDial.com JustDial.comSaw the ad a few days back on the TV, so thought could play with it. As expected, they haven't thought/bothered about Cross Site Scripting !Just search for our usual keyword : alert("XSS"); and you can get alerts.The reason for most XSS holes is due to the use of Microsoft's Active Server Pages (ASP). ASP does not have much default functions or modules to combat XSS. Whereas PHP has a number of functions to do the same.Happy Hacking ... ...

Google Search for Pro's

http://digitalpbk.blogspot.com/2007/03/google-search-for-pros.html Google Search for Pro's IntroGoogle is more than simply search engine, it is a multi faceted tool which can be used by professionals in all ventures. Here is the google language for searching : [site:]This modifier is used to limit search results to a specified site. Eg:orkut hacks site:digitalpbk.blogspot.com[allintitle:]This modifier when used will limit all your search queries to within the title. Eg: allintitle:the digital me [intitle:]This modifier when used will limit first search ...

Introduction to XSS Part 1

http://digitalpbk.blogspot.com/2006/12/introduction-to-xss-part-1.html 2 : Javascript injectionThe next thing you try to do is put javascript into those areas which appear on the site. For example alert("hi");Most probably it wouldn't have work, because either you tried it on some well known site or you have to enter a little more code. Take the following example:The following page has an XSS hole http://www.propmart.com/search/pm_IdSearch.asp?txtPropertyId=somesearchitemBut if you put ...

Apache Solr MySQL Sample Data Config

http://digitalpbk.com/apachesolr/apache-solr-mysql-sample-data-config Apache Solr MySQL Sample Data Config ApacheSolr is an indexing server from apache. It is written in Java and can be used to make search pages on your website. Most Websites use a MySQL database to store its data and standard MySQL search using SQL or FULLTEXT Searching by MySQL. But with ApacheSolr we can not only search but also improve the search results. Solr recognizes plurals and similar words like read, reading or A-DATA, adata etc. Therefore Solr returns more efficient search results ...

XSS on Yaari.com

http://digitalpbk.blogspot.com/2007/04/xss-on-yaaricom.html XSS on Yaari.com Lots of friendship network sites are coming up these days following the success of orkut. Another one supposedly originating from the same stanford university is yaari.com targeted at mainly Indian users. The site looks and functionality seems fine but is full of XSS holes (Cross Site Scripting). Almost all the fields can be bugged. Only thing that amazes me is that the site has used PHP. PHP has such a wonderful list of functions that can take care of the XSS problem. I wonder ...

Protect yourselves from phishing

http://digitalpbk.blogspot.com/2007/01/get-smart-against-phishing.html a Web search on it using popular search engines like google, yahoo. From the search results you can identify wether it is scam or original. In most cases, no banks will never ask you to enter your PIN or similar sensitive data through mails. You can also mail the legitimate organization for a confirmation on the email.Still you think its legitimate?There will be a link in the email where you are supposed to enter the confidential data. Before clicking take a good look at the url. Most browsers show ...

Mall Blog XSS in Comments

http://digitalpbk.com/2009/12/mall-blog-xss-html-comments Mall Blog XSS in Comments So you came from the The MALL blog, this is because of opened out HTML comments on the MALL blog. The MALL blog has full html support in its comments, which is a dangerous feature. More sites : www.eatsleepandcode.com www.layt.net mature-ip.eu : Any nodes can be edited on this site, wierd!!! Fix it ASAP XSS Security ...

JQuery make dynamic draggable and droppable containers

http://digitalpbk.com/jquery/drag-drop-make-dynamic-draggable-and-droppable-containers JQuery make dynamic draggable and droppable containers The jquery UI javascript has the Draggable and Droppable Interactions inorder to implement a drag drop UI. By default draggable and droppable containers are marked draggable and droppable by jQuery when the page loades, As shown in the code snippet below for the jQuery Drag code and jQuery Drop Code, jQuery Drop Code using jQuery droppable $(".dropTarget").droppable({ drop: function(event, ui) { // Drop Logic ...

XSS - Part 2 (Cookie stealing and Defacement)

http://digitalpbk.blogspot.com/2006/12/xss-part-2-cookie-stealing-and.html XSS - Part 2 (Cookie stealing and Defacement) Please note that this article is for educational purposes only, and is targeted at webmasters who have never seen this scenario. Please donot harm anyone. Disclaimer : I am not responsible for any damages arising due to methods specified in this page. Webmasters please fix it ASAP.In the first part we injected javascript successfully, and we got an alert. Now let us move to step 2 , defacing and cookie stealing.Cookie Stealing using XSSCookie ...