Hack Forums
[vulnerability] Flyff MMO private servers - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [vulnerability] Flyff MMO private servers (/showthread.php?tid=5123688)

[vulnerability] Flyff MMO private servers - DataDumper - Jan 6, 2016

So i have found an error in ranking mmorpg game Flyff but i didint menage to use the convert, so i decided to share with you maybe someone else will do that :)


DORK:
Code
inurl:ranking.php?job=
inurl:"ranking.php?guild="

example:
Code
http://rizemflyff.com/ranking.php?job=%27

error:
Code
Warning: odbc_exec(): SQL error: [Microsoft][ODBC SQL Server Driver][SQL Server]Conversion failed when converting the varchar value ''' to data type int., SQL state 22005 in SQLExecDirect in C:\xampp\htdocs\ranking.php on line 188

Warning: odbc_exec(): SQL error: [Microsoft][ODBC SQL Server Driver][SQL Server]Conversion failed when converting the varchar value ''' to data type int., SQL state 22005 in SQLExecDirect in C:\xampp\htdocs\ranking.php on line 189

Warning: odbc_result() expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\ranking.php on line 190


* - seyt - Jan 6, 2016

Wow look great ! Thank you for sharing