Hack Forums
Is this forum xss or sql vulnerable? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Is this forum xss or sql vulnerable? (/showthread.php?tid=5347521)



Is this forum xss or sql vulnerable? - FritzZz - Jul 22, 2016

Is this forum xss or sql vulnerable? Is there any chances?
http: //play-arena.ro/forum/


* - Teferi - Jul 22, 2016

No. .


* - Advertise - Jul 23, 2016

(Jul 22, 2016 12:02 PM)K0eN Wrote:  No. .

Don't say that, there is always a chance.

@OP It's best you look into SQLi and xss methods and how to utilize them to test yourself. Also this should be in the requests for hacking section. 🤝


* - bhammond1999 - Jul 23, 2016

Yes it is, because a website made for hackers to converse is obviously vulnerable to two of the most well known vulnerabilities. Its not like any hackers go here anyway. Hackforums is just a name, there are no hackers here.


* - Kayvh - Jul 23, 2016

(Jul 23, 2016 09:59 AM)bhammond1999 Wrote:  Yes it is, because a website made for hackers to converse is obviously vulnerable to two of the most well known vulnerabilities. Its not like any hackers go here anyway. Hackforums is just a name, there are no hackers here.

You do know hes not talking about this site, right? lmao


* - Salty Hacking - Jul 23, 2016

(Jul 23, 2016 11:13 AM)єѵөke Wrote:  You do know he not talking about this site, right? lmao

shhhh I want to see where this goes lmaooo 🤣


* - bhammond1999 - Jul 23, 2016

(Jul 23, 2016 11:13 AM)єѵөke Wrote:  You do know hes not talking about this site, right? lmao

Oh, lol


(Jul 22, 2016 10:13 AM)FritzZz Wrote:  Is this forum xss or sql vulnerable? Is there any chances?
http: //play-arena.ro/forum/

I'll scan it.


I was able to slip some special characters in using the XSS Me addon for Firefox. I wasn't able to get < or > in, but ; / and = weren't encoded. I wouldn't say there is too much risk, but I'd give it a 4/10, 10 being devastating.
'