#30854 [Bgs]: There´s an exploit, which lets you access the MySQL-Database
| From: | zsak at gmx dot de | Date: | Sun, 21 Nov 2004 12:18:31 +0000 |
| Subject: | #30854 [Bgs]: There´s an exploit, which lets you access the MySQL-Database | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-69312@lists.php.net to get a copy of this message | ||
ID: 30854
User updated by: zsak at gmx dot de
Reported By: zsak at gmx dot de
Status: Bogus
Bug Type: MySQL related
Operating System: Irrelevant
PHP Version: Irrelevant
New Comment:
It´s NOT a phpBB Problem!
As I said, WBB and IBP have the same problem. Please think about the
problem! There is one!
Previous Comments:
------------------------------------------------------------------------
[2004-11-21 13:12:44] tony2001@php.net
Sorry, but your problem does not imply a bug in PHP itself. For a
list of more appropriate places to ask for help using PHP, please
visit http://www.php.net/support.php as this bug system
is not the
appropriate forum for asking support questions.
Thank you for your interest in PHP.
It's phpBB problem.
------------------------------------------------------------------------
[2004-11-21 13:11:24] zsak at gmx dot de
Description:
------------
I have a phpBB on my Webspace and 3 of my Friends have wBB, VB and IBP.
I know a user(Nickname: gonzo), who says, he can access the whole
Database over a PHP-Exploit.
He knows all the secure (hidden) data of our Boards.
Because we all use different Board-Versions it can´t be a
Board-Exploit.
Sorry, I don´t have more information, because the user doesn´t want to
say, how the exploit works.
The only thing I know is, that he knows the hidden data of our boards
and therefore there must be a bug in PHP!
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=30854&edit=1