Tuesday, July 31, 2018

BUGS Web www.pertamedika-ihc.co.id

DOMAIN : http://www.pertamedika-ihc.co.id
BUGS : SQL INJECTION
Injection : /showpost.aspx?
Parameter : id


DBMS is Microsoft SQL Server
web server operating system: Windows 2008 R2 or 7
web application technology: ASP.NET, ASP.NET 4.0.30319, Microsoft IIS 7.5
DBMS: Microsoft SQL Server 2008

databases:
[*] aset
[*] cdesk
[*] eScanner
[*] master
[*] model
[*] msdb
[*] mysap
[*] orm
[*] pajak
[*] pks
[*] ReportServer
[*] ReportServerTempDB
[*] sjv
[*] tempdb
[*] uc
[*] unitcost
[*] web
[*] website
-----

Windows IP Configuration
Ethernet adapter Local Area Connection 5:

   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::756b:27ec:61d3:ef1c%17
   IPv4 Address. . . . . . . . . . . : 192.168.8.8
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 

Ethernet adapter Local Area Connection 4:

   Connection-specific DNS Suffix  . : 
   Link-local IPv6 Address . . . . . : fe80::e955:8534:b699:bd2b%16
   IPv4 Address. . . . . . . . . . . : 103.78.213.187
   Subnet Mask . . . . . . . . . . . : 255.255.255.240
   Default Gateway . . . . . . . . . : 103.78.213.177

Tunnel adapter isatap.{59068695-5E16-4DFF-8B0F-ED3D162AFB46}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 

Tunnel adapter Local Area Connection* 11:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 

Tunnel adapter isatap.{C056CAB0-2673-4EB6-A1E0-373495DFA6D4}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . : 

Tunnel adapter 6TO4 Adapter:

   Connection-specific DNS Suffix  . : 
   IPv6 Address. . . . . . . . . . . : 2002:674e:d5bb::674e:d5bb
   Default Gateway . . . . . . . . . : 2002:c058:6301::c058:6301
---


Report sudah dikirimkan melalui email ke alamat info@pertamedika.co.id dan humasrspp@pertamedika.co.id, pada tanggal 17 Agustus 2017.
Sampai artikel ini ditayangkan (31 Juli 2018) belum ada respon / email balasan.

No comments: