How To Hack vBulletin 4.1.10 Admin Control Panel

Marks Hackers · 03-03-2012, 10:57 AM

vBulletin 4.1.10 Vulnerability description:

When a new name and password is entered in a form and the form is submitted, the browser asks if the password should be saved. Thereafter when the form is displayed, the name and password are filled in automatically or are completed as the name is entered. An attacker with local access could obtain the cleartext password from the browser cache.

.This vulnerability affects /admincp
.The impact of this vulnerability
.Possible sensitive information disclosure

Now I Will Tell You How To Hack Admin Cp

Password type input named

Code:
vb_login_password

from form named loginform with

Code:
action ../login.php?do=login

has autocomplete enabled.

IN That Way You Could Do Sql Injection

Other Vulnerabilty Found Also

The HTML comments of this page contain configuration information for Microsoft Frontpage Server Extensions. The configuration information includes the Frontpage version and may help an attacker to learn more about his target.
This vulnerability affects

Code:
/_vti_inf.html.

To Attack It

Code:
example.com/admincp/_vti_inf.html

Or Use That Way

Code:
example.com/_vti_inf.html

Enjoy

More Tutorials Waiting For You

_BlaCk~TuLiP_ · 03-03-2012, 11:41 AM

realy nice...thankssss alottttttt.we r w8ing for ur more tutarial

Marks Hackers · 03-03-2012, 05:37 PM

_BlaCk~TuLiP_

Welcome Bro

I Will Post More

Marks Hackers · 03-03-2012, 06:13 PM

Thats Better bro wish u good luck

ttsaon · 03-19-2012, 10:27 AM

*snip*

~Please no blackhat activities.

Ironik · 04-11-2012, 01:58 AM

thanks for this will come handy

ThatGuy_InTheHat · 10-04-2012, 08:03 AM

i dont understand this. can u explain the use of this?

bibekbasu123 · 10-13-2012, 01:56 PM

Thanks I Was Looking For Something Like This. Smile

princeshama · 10-13-2012, 04:52 PM

you have any tutorial for 3.8.6 thankx