Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

[FOUND] SQLI found in a big PHPBB3-Addon [FOUND]

I've found a big addon for phpbb3 forums, and it's sqli-vuln!

google dork:
inurl:mypage.php?id=1

Much sites are using this addon ( over 1000 forums)

Here are some big forums with the addon:

Quote:http://www.gig-board.de/mypage.php?id=3 (2500 users)
http://maxedgaming.com/forum/mypage.php?id=5 (1000 members)
http://poke-friends.net/forum/mypage.php?id=19 (1000 members)
http://www.tierpla.net/mypage.php?id=3 (700 users)
http://www.spieleresidenz.de/board/mypage.php?id=1 (600 users)
http://www.casualadultgamers.com/mypage.php?id=58 (600 users)


There are so much other mypage.php vuln (big) sites ;D

enjoy


Great find dude :)
repp'ing
Nice find,but even if you find admin on it it's hard to crack those hashes :]
So good luck with that.
Nice found! Mostly German/Dutch sites isn't it?
I noticited this dork thanks!


Possibly Related Threads...
Thread / Author Replies Views Last Post
by sosweetJun 22, 2021 10:51 AM 1 134 Jun 22, 2021 10:51 AM
Last Post: account_
by 0u1lawNov 4, 2020 12:06 PM 0 92 Nov 4, 2020 12:06 PM
Last Post: 0u1law
by deathkillDec 20, 2016 10:05 AM 9 281 Dec 20, 2016 10:05 AM
Last Post: █─█ █▄█ █▀▄▀█