[Pvsxe]

i have found the admin/pass for the thrid link i.e. http://www.hispanicheritage.org/press_news.php?id=180
and also the login page. But i am unable to connect. Is it anything to do with the country region?? can someone plz help me out???

dind't work by me neither, probally it is country region login..

[Prominent]

Not bad for a vulnerable site list, keep updating it ;)

[Scrat]

Bump so more people can see this and like it.

[TheIndex]

Feeling bad SQLI this: http://kirstenbrydum.virtual-memorials.c...&page_no=1

:/ I don't know if I should or not :s.

[-DownFall]

Feeling bad SQLI this: http://kirstenbrydum.virtual-memorials.c...&page_no=1

:/ I don't know if I should or not :s.

Nothing wrong with it, you should actually try and get user info and send an email to the webmaster about his vulnerabilities. Just don't deface it.

[kinglaz]

http://www.hispanicheritage.org/press_news.php?id=180
yeah i got into this one aswel.. But esshh i cant connect..

[YMCMB™]

Once you deface it and get the username and pass were do I log in at?

[-DownFall]

Once you deface it and get the username and pass were do I log in at?

You have to find the admin panel, and you can't deface it until you get in.

[rand0]

http://www.aisonic.com dibs! :)

or maybe kidneytimes.com instead. I probs won't deface any though. Just wanna get more xp :) Anyone have any blind sqli vulns, by the way? I need the practice. I feel like version 5 is getting a bit too easy for me at this point.

[-DownFall]

http://www.aisonic.com dibs! :)

or maybe kidneytimes.com instead. I probs won't deface any though. Just wanna get more xp :) Anyone have any blind sqli vulns, by the way? I need the practice. I feel like version 5 is getting a bit too easy for me at this point.

A lot of sites vulnerable to basic injection are also vulnerable to blind injection.

[rand0]

A lot of sites vulnerable to basic injection are also vulnerable to blind injection.

I know, but I want a version 4. I don't want a lot of the nice stuff you can do in version 5 like schema and group_concat and whatnot. I suppose I could look up all the things you can't do and not do them, but I sort of want to try a real live case. I'll probably take your advice if I can't find any on my own soon, so thanks!

[berg]

Thanks for sharing this list mate. I really appreciate this.

[Chronos™]

thanks helpfull, i searched for some vulnerable sites