Bugtraq mailing list archives
RE: Possible phpBB <=2.0.11 bug or sql injection?
From: Miguel Angel Rodríguez Jódar <rodriguj () atc us es>
Date: Fri, 18 Feb 2005 02:31:06 +0100
It seems it has something to do with the the \'s *'s and length. I am not
sure if this is a big bug but I decided to
try that after looking at search.php
Not sure either but I think it's quite serious as the name of the database, among other things, is displayed. Maybe it's good idea to alter that line so "irrelevant" information remains hidden (at least until a better solution arrives): if ( !($result = $db->sql_query($sql)) ) { message_die(GENERAL_ERROR, "Couldn't obtain list of matching users (searching for: $search_author)"); } -- Miguel Angel Rodriguez Jodar | http://www.atc.us.es Departamento de Arquitectura y Tecnologia de Computadores Universidad de Sevilla Spain
Current thread:
- Possible phpBB <=2.0.11 bug or sql injection? jtm297 (Feb 17)
- RE: Possible phpBB <=2.0.11 bug or sql injection? Miguel Angel Rodríguez Jódar (Feb 19)
- Re: Possible phpBB <=2.0.11 bug or sql injection? kaosone+[ONE]+ (Feb 19)
- Re: Possible phpBB <=2.0.11 bug or sql injection? Giacomo Rizzo (Feb 19)
- <Possible follow-ups>
- Re: Possible phpBB <=2.0.11 bug or sql injection? Exoduks (Feb 19)