bugtraq - Re: Invision Power Board 2.1 <= 2.1.6 sql injection

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <814b9d50607181103j78f6ed7gc657c89ea2822778@mail.gmail.com>
Date: Tue, 18 Jul 2006 13:03:06 -0500
From: str0ke <str0ke@...w0rm.com>
To: "paul dansing" <dansing@...ssinfo.org>
Cc: bugtraq@...urityfocus.com
Subject: Re: Invision Power Board 2.1 <= 2.1.6 sql injection

Paul,

Should work just fine if an admin is logged in.

/str0ke

On 7/16/06, paul dansing <dansing@...ssinfo.org> wrote:
> Hello rst,
>
> i got this from your website couple days ago. it does NOT work on any
> 2.1.6 board i have here even vanilla default install.
>
> can anyone please confirm this working on 2.1.6??
>
> i removed their "phone home", and added a user-agent string, in their
> exploit.
>
>