 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 109
 Members: 0
 Total: 109
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
phpBB3 and Mysql4 |
|
 Posted: Thu Feb 04, 2010 12:53 pm |
 |
|
| dun9 |
| Beginner |
 |
|
| Joined: Feb 04, 2010 |
| Posts: 2 |
|
|
|
 |
|
 |
|
I have a phpbb3 with mysql4, there is a mod with Remote Blind Sql Injection but the table prefix is not default.
Is there a way to understand the table prefix? With Mysql 5 I can select the information_schema, but mysql4 not has it.
On database I don't have the FILE grant, so I can't create file with select outfile.
Thank you. |
|
|
|
|
| Posted: Thu Feb 04, 2010 1:43 pm |
|
|
| dun9 |
| Beginner |
|
|
| Joined: Feb 04, 2010 |
| Posts: 2 |
|
|
|
|
|
|
|
| Sorry maybe the section is incorrect. |
|
|
|
|
| Posted: Thu Feb 04, 2010 10:15 pm |
|
|
| waraxe |
| Site admin |
 |
|
| Joined: May 11, 2004 |
| Posts: 2407 |
| Location: Estonia, Tartu |
|
|
|
|
|
|
| Without information_schema it is hard task. You can try to bruteforce and/or use worldlist, but such approach means piles of (potential) sql error logs. |
|
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
