+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [FOUND] SQLI found in a big PHPBB3-Addon [FOUND] (/showthread.php?tid=1465018)
[FOUND] SQLI found in a big PHPBB3-Addon [FOUND] - Attacker011 - Jul 9, 2011
I've found a big addon for phpbb3 forums, and it's sqli-vuln!
google dork:
inurl:mypage.php?id=1
Much sites are using this addon ( over 1000 forums)
Here are some big forums with the addon:
Quote:http://www.gig-board.de/mypage.php?id=3 (2500 users)
http://maxedgaming.com/forum/mypage.php?id=5 (1000 members)
http://poke-friends.net/forum/mypage.php?id=19 (1000 members)
http://www.tierpla.net/mypage.php?id=3 (700 users)
http://www.spieleresidenz.de/board/mypage.php?id=1 (600 users)
http://www.casualadultgamers.com/mypage.php?id=58 (600 users)
There are so much other mypage.php vuln (big) sites ;D
enjoy
* - FZ4NZ - Jul 9, 2011
Great find dude :)
repp'ing
* - HaxOr❤ - Jul 9, 2011
Nice find,but even if you find admin on it it's hard to crack those hashes :]
So good luck with that.
* - Semi-Skimmed Milk - Jul 9, 2011
Nice found! Mostly German/Dutch sites isn't it?
* - Grey Mind - Jul 9, 2011
I noticited this dork thanks!