Waraxe IT Security Portal

annelid · Beginner

Hi,

I don't believe they have

register_globals=On
magic_quotes off

set unless they are the defaults so those won't work. What would the best way to check be?

at any rate, is there a really slick exploit that effects this version?

annelid · Beginner

ok so I set up the cookie grabber NP and the forum has HTML on however I don't know/think its on by default for individual users

IS there some workaround that forces them to see it? (or rather not see it)

lenny · Valuable expert

Just google "phpbb 2.0.17 exploits" - it pulls up a load if information.
I'll refer you here: http://securityreason.com/exploitalert/113
(ps, its not actual SQL injection... but the end result is the same :p)

annelid · Beginner

That is the first exploit I tried; it did nothing. I don't believe they have the required magic_quotes or register_globals settings. I already Googled to find exploits. I already Googled to find exploits. I tried literally every single exploit on milw0rm for phpBB versions 2.0.17 to 2.0.22 and couldn't get a single one of them to work. The only thing I have successfully set up is the cookie grabber. I tried using the "suntzu" exploit script or whatever using the admin's sid, but that didn't work. I even made sure to change the userid '2' in the script to the admin's userid '4' (let me know if I did so somethign wrong there). The only thing I have actually gained from the cookie grabber is the ability to log in as other users by modifying my autologinid cookie to match another user's, but I have yet to find an admin that uses autologin. I'd like to try the cookie grab on as few people as possible in case they have their HTML disabled.