Re: Invision Power Board 2.1 <= 2.1.6 sql injection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Invision Power Board 2.1 <= 2.1.6 sql injection

Subject: Re: Invision Power Board 2.1 <= 2.1.6 sql injection
Date: Tue, 18 Jul 2006 13:03:06 -0500
From: str0ke <suppressed>

Paul,

Should work just fine if an admin is logged in.

/str0ke

On 7/16/06, paul dansing <suppressed> wrote:

Hello rst,

i got this from your website couple days ago. it does NOT work on any
2.1.6 board i have here even vanilla default install.

can anyone please confirm this working on 2.1.6??

i removed their "phone home", and added a user-agent string, in their
exploit.

References:
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection
  - From: paul dansing

Prev by Date: 23rd Chaos Communication Congress 2006: Call for Participation
Next by Date: Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities
Previous by thread: Re: Invision Power Board 2.1 <= 2.1.6 sql injection
Next by thread: Re: Invision Power Board 2.1 <= 2.1.6 sql injection
Index(es):
- Date
- Thread

Mail converted by mhonarc 2.6.15
This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.