bugtraq - SQL IN Open Bulletin Board

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050808110314.6279.qmail@securityfocus.com>
Date: 8 Aug 2005 11:03:14 -0000
From: ABDUCTER_MINDS@...OO.COM
To: bugtraq@...urityfocus.com
Subject: SQL IN Open Bulletin Board


Class:  Input Validation Error
Remote:  Yes   
Local:  Yes
Credit: ABDUCTER ----> ABDUCTER_MINDS@...OO.COM  {OR} ABDUCTER_MINDS76@...MAIL.COM
Vulnerable: Powered by Open Bulletin Board ALL VERSION
******************************************************
info :- openbb is APOPULAR FORUM HAVE MANY VERSION U CAN FIND SOURCE OF FORUM IN
http://www.openbb.com/
******************************************************
discussion :- there is many sql in 
                              (board.php) as wwww.victim.com/openbb/board.php?FID=[sql]
                              (read.php) as www.victim.com/openbb/read.php?TID=[sql]
                              (member.php) as www.victim.com/openbb/member.php?action=profile&UID=[sql]

******************************************************
CREDITS :-
          FOR ALL ARAB [EGYPT]
          WWW.S4A.CC
          TO MY LOVE (N0N0)
          DEVIL_00