Mar 2, 2019 08:16 AM
(This post was last modified: Mar 2, 2019 02:39 PM by Babayaro.)
Not sure title is right but I want to know before trying. Does anyone tried to hack or hacked IP board forum?
Are IP Board forums has Sql Injection Vulnerability? |
 
Yes, IPB systems are vulnerable if you download them thru invisionvirus and similar websites, thus they are publishing a "fix" plugins in order to avoid those holes. The system itself is stable if you purchase it from original devs, what makes it vuln is the plugins you download
Жизнь это не те дни, что прошли, а те, что запомнились
(Mar 3, 2019 05:12 AM)Dotexe Wrote: Yes, IPB systems are vulnerable if you download them thru invisionvirus and similar websites, thus they are publishing a "fix" plugins in order to avoid those holes. The system itself is stable if you purchase it from original devs, what makes it vuln is the plugins you download Thank you for your answer. As I see there's different types (themes) of IP Board forums. Is it possible to see their versions searching for vulnerabilities or exploits? (Mar 3, 2019 04:08 PM)Babayaro Wrote: Thank you for your answer. As I see there's different types (themes) of IP Board forums. Is it possible to see their versions searching for vulnerabilities or exploits? You could search the version for vulnerabilities and if there's any you should see it on their forums. But if you ask if there's a tool that does this instead of you, no. Жизнь это не те дни, что прошли, а те, что запомнились
(Mar 4, 2019 02:08 AM)Ramb0x Wrote: Long time i see no exploit for IPB. Maybe you can check for some XSS. Or if the forum have an File upload option you can keylog the admin with new WinRAR exploit....... Forum has file upload option, what is this new winrar exploit about?
We never found any SQLi, but if you have interaction with a mod or admin and can get them to click a link, then you can hack the forum. Check here: https://www.scribd.com/document/396165483/IPB
(Mar 6, 2019 01:35 AM)M L T Wrote: We never found any SQLi, but if you have interaction with a mod or admin and can get them to click a link, then you can hack the forum. Check here: https://www.scribd.com/document/396165483/IPB I searched forum and realized it's an old version of IP Board forums it must be version 3.x.x And there's 2 vulnerabilities for these versions CVE-2012-5692 and CVE-2014-9239 Metasploit includes CVE-2012-5692 but gives 403 during run. |
|
|
