Search content
Sort by
Showing 6 of 6 results by Bucc
Re: Forex Coral Limited | legal company | instant withdrawals | 4.5-8% daily
Public Service Announcement -
This is just another Way to Earn Bitcoin
Do Invest Now!
Those who choose to post of their participation
support or encouragement for this earning project will
be tagged with Positive trust for proving
they wish to help the people to operate this
legit service in return for a share of the funds generated. Thereby proving they are
trustworthy forum members.
YOU HAVE BEEN ADVICED!
This is just another Way to Earn Bitcoin
Do Invest Now!
Those who choose to post of their participation
support or encouragement for this earning project will
be tagged with Positive trust for proving
they wish to help the people to operate this
legit service in return for a share of the funds generated. Thereby proving they are
trustworthy forum members.
YOU HAVE BEEN ADVICED!
Re: WinBTC.online - Automated Doubler with MAX 0.05 BTC for Longevity
Found this web-site, and I could see security holes in the first minute browsing it.I have just made a full vulnerability test on your web-site - https://winbtc.onlineYours is in a pretty bad shape at the moment.Let me show you what I have found:SQL Injection"NOTE! Security issue like this can allow an attacker to gain access to your MySQL Database, and access private information."Vulnerable input field: "Enter Your BTC Address Here"The Field: http://puu.sh/oP9xK/96a40e6f5c.pngIf you enter this: btcadd=1'%22&r=&yn=submit in this field, you will get a MySQL Error:The Error:http://puu.sh/oP9GA/590c373340.png
There are 1 more input field, which is Vulnerable to this same Security hole.Vulnerable input field: "Enter Your BTC Address Here"Location: https://winbtc.online/lookup.phpThe Field: http://puu.sh/oPaff/7cada1149a.pngWant to test your-self?If you enter this: btcadd=1'%22&r=&yn=submit in this field, you will get a MySQL Error:The Error:http://puu.sh/oPah8/24b574561b.png
Another Big Programming "Carelesness"System takes queries from Database using this file: "https://winbtc.online/getuser.php".NOW, you can just enter what ever "Depositer ID" you like, and you have access to Investor Info. However Database looks primitive.Want to test your-self?Add this to the link I gave you above - "?=1", and you will see the database records.Like this: https://winbtc.online/getuser.php?q=1And you will see:http://puu.sh/oPdfG/420cf0a76d.pngThis happens because the digit in the link is actually an ID from the Database, which lets you select which ever database record you want.You can play around just by changing the digit.Example:https://winbtc.online/getuser.php?q=5
Cross-Site Scripting"Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them."I found this on multiple pages, however I will show you 1 example, otherwise the report will be too long.One of the pages affected by this is: https://winbtc.online/faq.phpYou can simply change this link to (example): https://winbtc.online/faq.php/%22onmouseover='prompt%28940945%29'bad=%22%3EAnd now when you mouse-over everywhere on the page, the injected JS will activate. In this case, when you mouse-over anything, you will get a simple JavaScript Popup Message, to prove the concept is real and working.Preview:http://puu.sh/oPbF1/cc547a35a3.png
Sorry for the long report,Thank you,Devsoft.
Thank you for the report, I will contact you about setting up my BTC Project.
Code:
Warning: mysql_fetch_object(): supplied argument is not a valid MySQL result resource in /home/lng6ojtci/public_html/winbtc.online/index.php on line 185Warning: mysql_fetch_object(): supplied argument is not a valid MySQL result resource in /home/lng6ojtci/public_html/winbtc.online/index.php on line 199
Want to test your-self?Enter: btcadd=1'%22&r=&yn=submit into the "Enter Your BTC Address Here" field.There are 1 more input field, which is Vulnerable to this same Security hole.Vulnerable input field: "Enter Your BTC Address Here"Location: https://winbtc.online/lookup.phpThe Field: http://puu.sh/oPaff/7cada1149a.pngWant to test your-self?If you enter this: btcadd=1'%22&r=&yn=submit in this field, you will get a MySQL Error:The Error:http://puu.sh/oPah8/24b574561b.png
Code:
Warning: mysql_fetch_array() expects parameter 1 to be resource, boolean given in /home/lng6ojtci/public_html/winbtc.online/getuser.php on line 170
Another Big Programming "Carelesness"System takes queries from Database using this file: "https://winbtc.online/getuser.php".NOW, you can just enter what ever "Depositer ID" you like, and you have access to Investor Info. However Database looks primitive.Want to test your-self?Add this to the link I gave you above - "?=1", and you will see the database records.Like this: https://winbtc.online/getuser.php?q=1And you will see:http://puu.sh/oPdfG/420cf0a76d.pngThis happens because the digit in the link is actually an ID from the Database, which lets you select which ever database record you want.You can play around just by changing the digit.Example:https://winbtc.online/getuser.php?q=5
Cross-Site Scripting"Malicious users may inject JavaScript, VBScript, ActiveX, HTML or Flash into a vulnerable application to fool a user in order to gather data from them."I found this on multiple pages, however I will show you 1 example, otherwise the report will be too long.One of the pages affected by this is: https://winbtc.online/faq.phpYou can simply change this link to (example): https://winbtc.online/faq.php/%22onmouseover='prompt%28940945%29'bad=%22%3EAnd now when you mouse-over everywhere on the page, the injected JS will activate. In this case, when you mouse-over anything, you will get a simple JavaScript Popup Message, to prove the concept is real and working.Preview:http://puu.sh/oPbF1/cc547a35a3.png
Sorry for the long report,Thank you,Devsoft.
Re: ★ BitcoinAngels ★ 2% HOURLY FOR 96 HOURS √ ιиѕтαит ❤ G I V E A W A Y < < <
Public Service Announcement -
This is just another Ponzi Scam
Do Not Invest!
Those who choose to post of their participation
support or encouragement for this scam will
be tagged with negative trust for proving
they wish to help the scammers operate this
Ponzi in return for a share of the funds stolen
from other users. Thereby proving they are not
trustworthy forum members.
YOU HAVE BEEN WARNED!
This is just another Ponzi Scam
Do Not Invest!
Those who choose to post of their participation
support or encouragement for this scam will
be tagged with negative trust for proving
they wish to help the scammers operate this
Ponzi in return for a share of the funds stolen
from other users. Thereby proving they are not
trustworthy forum members.
YOU HAVE BEEN WARNED!
Thank you for your opinion. We have already seen it 100 times in all threads. In the future, try your useless spam (which everyone knows) do not write here.
Says the guy who repeatedly replies with the same instruction not to post my Public Service Announcement as though it actually is going to make me stop in my drive to push these scams out of this forum. It's almost as though you don't see the irony of your own spam-like response.
no offense but you are pathetic
its obvious that you got nothing to do in real life and no one is paying you attention there so you come here in this virtual world and try to be something. well you are not..and you will fail at your pathetic "quest".
why dont you set some real goals in real life. like getting laid or something and stop trying to be keyboard warrior when no one really cares about you or your trust thing.
prolly someone scammed your because you are not one of the bright ones so you come here and cry like a women on a period.
you must have no life in order to be able to fallow up people and spend your time to press on negative trust and typing comments. imagine spending all that time in something productive for your own benefit and growth?
only one who loses something here is you speaking in matter of invested time and effort
im investing in this looks legit