Hack Forums
Looking 4 MyBB, IPB, OpenCart SQLi Vulns - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Looking 4 MyBB, IPB, OpenCart SQLi Vulns (/showthread.php?tid=5922086)



Looking 4 MyBB, IPB, OpenCart SQLi Vulns - krlo-s - Dec 23, 2018

Greetings hackforums,

Does anybody have any SQL injection vulnerabilities to share for MyBB,PHPbb, Opencart or IPB please? may be paid or free. I already have public available vulnerabilities.

Thank you if you can help me 😉

Sincerely yours


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - ~[DogiD]~ - Dec 24, 2018

You best bet is to search from Exploit-DB.

~ DogiD


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - krlo-s - Dec 24, 2018

Thank you ~[DogiD]~, I have seen private exploits that takes months before being posted on exploit-db. Are there any private ?


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - 0xB9 - Dec 24, 2018

(Dec 24, 2018 11:29 AM)krlo-s Wrote:  Are there any private ?
Possibly but we wouldn't know... that's what makes them private.

Anyhow there was a SQLi in the last version of MyBB 1.8.18 located on the contact page.


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - M L T - Dec 27, 2018

I have 0days for every forum CMS. Hmu if you're interested in buying.


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - munjoob22 - Dec 28, 2018

(Dec 27, 2018 06:42 AM)M L T Wrote:  I have 0days for every forum CMS. Hmu if you're interested in buying.

i'm interesting how to buy?


RE: Looking 4 MyBB, IPB, OpenCart SQLi Vulns - Nyx - Dec 28, 2018

(Dec 24, 2018 11:33 AM)0xB9 Wrote:  Possibly but we wouldn't know... that's what makes them private.

Anyhow there was a SQLi in the last version of MyBB 1.8.18 located on the contact page.

I mean having knowledge of an existing exploit does not necessarily make it no longer private. As long as the person who knows THE exploit keeps how he is using it a secret, it still would be considered private. For example, Say I KNOW of an existing exploit inside of google chrome that affects anyone using the most recent version; that does not mean however that I know HOW it is working, just that I know it exists.


(Dec 27, 2018 06:42 AM)M L T Wrote:  I have 0days for every forum CMS. Hmu if you're interested in buying.

(Dec 28, 2018 08:55 AM)munjoob22 Wrote:  i'm interesting how to buy?

MLT know's his stuff.
He is not going to charge a small amount for any exploits that can be used on the most popular forms of forum sofware.

Expect to be paying upwards of $2500 for a single exploit.
[/quote]