MyBB MyStatus 3.1 – SQL Injection

• Exploit Database
• 35 阅读

• 作者： Mario_Vs
  日期： 2011-10-12
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17972/

• ---------------------------------------------------------------------
  Exploit Title : MyBB MyStatus 3.1
  ---------------------------------------------------------------------
  
  Author: Mario_Vs
  Date: 10/10/2011
  Site: http://mariovs.pl/
  @	: mario_vs[at]o2.pl
  ---------------------------------------------------------------------
  
  Description >
  
  Vendor 	: http://mods.mybb.com/download/mystatus
  Tested On : Windows 7
  ---------------------------------------------------------------------
  
  SQL Injection
  
  http://localhost/mybb/process-mystatus.php?action=delete&statid=[SQLi]
  ---------------------------------------------------------------------
  
  ---------------------------------------------------------------------
  
  Greets To: linc0ln.dll, j4ck, lDoran, ElusiveN, d3dik, thc_flow, PricK, artii2
  
  All users: HackinQ.pl