 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 85
 Members: 0
 Total: 85
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
Phpbb 2.0.6 Hack not working?... |
|
 Posted: Thu Sep 18, 2008 8:02 pm |
 |
|
| Weehaw |
| Beginner |
 |
|
| Joined: Sep 18, 2008 |
| Posts: 3 |
|
|
|
 |
|
 |
|
Okay...I tried the (access admin panel) Cookie Editing exploit for a forum that uses Phpbb v2.0.6...it doesn't work, I believe there are some factors contributing to it's failure...
1. It's a community site (for example, like Myspace, you log in and it takes you to a Profile Settings page from there)...
2. There is no "remember me" or "keep me logged in" check box anywhere...also, the cookies expire at the end of the session...
Is there any way around this?... |
|
|
|
|
| Posted: Thu Sep 18, 2008 8:34 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
Are you sure, that it's not patched allready long time ago? 
Version string does not always reflect the reality ... |
|
|
|
|
| Posted: Thu Sep 18, 2008 8:42 pm |
|
|
| Weehaw |
| Beginner |
|
|
| Joined: Sep 18, 2008 |
| Posts: 3 |
|
|
|
|
|
|
|
| waraxe wrote: | Are you sure, that it's not patched allready long time ago?
Version string does not always reflect the reality ... |
Is there any way of knowing this?...at the bottom of the forum index page, it reads "Powered by phpBB 2.0.6 © 2001, 2002 phpBB Group"...
...also, below that, it reads "© 2004 *******.com"...
???...the forum IS a little rinky-dink from the looks of it, it's not well kept...that's why I thought it was safe to assume that it in fact MY be the right version string... |
|
|
|
|
| Posted: Thu Sep 18, 2008 8:44 pm |
|
|
| Weehaw |
| Beginner |
|
|
| Joined: Sep 18, 2008 |
| Posts: 3 |
|
|
|
|
|
|
|
I could message you the name of the website if you think it would be fair for you to take a look at it yourself...
Upon looking through these forums, I figure that posting actual links is prohibited...am I right?... |
|
|
|
|
www.waraxe.us Forum Index -> Newbies corner
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
