BugTraq
Invision Power Board 2.1 <= 2.1.6 sql injection Jul 14 2006 12:38PM
rst ghc ru (1 replies)
Re: Invision Power Board 2.1 <= 2.1.6 sql injection Jul 16 2006 12:46PM
paul dansing (dansing swissinfo org) (1 replies)
Re: Invision Power Board 2.1 <= 2.1.6 sql injection Jul 18 2006 06:03PM
str0ke (str0ke milw0rm com)
Paul,

Should work just fine if an admin is logged in.

/str0ke

On 7/16/06, paul dansing <dansing (at) swissinfo (dot) org [email concealed]> wrote:
> Hello rst,
>
> i got this from your website couple days ago. it does NOT work on any
> 2.1.6 board i have here even vanilla default install.
>
> can anyone please confirm this working on 2.1.6??
>
> i removed their "phone home", and added a user-agent string, in their
> exploit.
>
>

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus