 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 88
 Members: 0
 Total: 88
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Anyway to exploit? |
|
 Posted: Fri Apr 29, 2005 6:04 am |
 |
|
| Alexis |
| Beginner |
 |
|
| Joined: Apr 29, 2005 |
| Posts: 2 |
|
|
|
 |
|
 |
|
I tried to login as an admin on this one forum using the cookie trick and I did it using firefox+Live HTTP headers, I could log in and see hidden people online and click on the Go to Administration panel - Where it asks me for name and password ( I assume this means it was patched)
I uh... don't know what version of phpBB this site is running - is there anyway I can tell?
After this I tried replaying the page a few times and it eventually takes me to
http://forums.xxxxxx.com/forums/templates/Aeolus/images/lang_/btn_index_on.gif
And assuming it's patched, how can I go about getting the Admin's password? Is there anyway I can use what I've done? Is there anything I can do to get admin access?
-I'm so noob and such a typical girl. Please help me ;_; |
|
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
