OK, using the new phpbb 2.0.15 hole (I swore i'd never hack forums again :rolleyes: ) i've managed to get a database login name and password. Thats cool and all but there is one little thing, the username isnt one of a registered user so im assuming its a unique one purely for use to login to their CMS. My problem now is this, I have no idea how to locate the link to the CMS, i've tried the usual ones such as targetsite.com/cpanel etc but no luck. If anyone else has any suggestions as to how I would go about logging into the database it would be appreciated.
this is the output from the exploit:
[+] Database Host: localhost [+] Database Name: phpbbforum [+] Username: forum [+] Password: klnn1524
(mm smells like skiddie ;))
Thanks, nnp

Sign In
Register
Help
MultiQuote