[Hexag0ne]

www.blogs.nasa.gov

Attack, gentlemen. ^^
EDIT: Okay.. wow. I didnt expect no one would be able to do it o-o

[dabox]

this is old man but nice found :D keep... <3

[Krypto.]

Making us hunt down the url isnt cool though... http://blogs.nasa.gov/ivv/photos/?locale...pa-occur=1

---

The plugin turn out to also be vuln to SQL Injection http://exploitsdownload.com/search/Word%...203.4.1/26 who knew?

[Hexag0ne]

Lol, that awkward moment when you say you know it, and you dont post pictures.

[Krypto.]

I actually couldnt find the vuln, but dabox says he did. good find Hexag0ne

[Hexag0ne]

Haha, thanks. If you solve it, post pictures guys x.x

[Sandikaaa]

Obicham ta hex :*

Solved

[Krypto.]

Unikalen gei si brat seriozno <3 actersfuck

NO WAY! HE WORKS FOR VALVE AND... HALF LIFE 3 CONFIRMED.

[Hexag0ne]

NO WAY! HE WORKS FOR VALVE AND... HALF LIFE 3 CONFIRMED.

HAHAHAHAHAHAH MY FUCKING SIDES.
You, my friend, deserve to be way higher in this forum.

[Krypto.]

HAHAHAHAHAHAH MY FUCKING SIDES.
You, my friend, deserve to be way higher in this forum.

😊 Thats what I was saying to Omniscient! He was all... no.

[Mx.]

Omg what a great tutorial but the FBI is watching you.

[rm -rf -R system32]

Is this that shitty one where you just change your useragent? It's a COldfusion vuln

[_Silky]

Noticed you're Russian.. One thing the US government doesn't give a shit about, is XSS vulns.

http://www.xssed.com/search?key=blogs.nasa

[Hexag0ne]

1rst. Not russian lol.
2nd. Its not anything related to useragents or fkin coldfusion.
3rd. My vuln isnt on that list ;d

[_Silky]

1rst. Not russian lol.
2nd. Its not anything related to useragents or fkin coldfusion.
3rd. My vuln isnt on that list ;d

Ohh, well you look Russian lol. But my main point being, they're not going to care unfortunately, unless it's persistent.
But maybe they did, because the website looks down at the moment lol..