Jump to content

Invite Scene - #1 to Buy, Sell, Trade or Find Free Torrent Invites

#1 TorrentInvites Community. Buy, Sell, Trade or Find Free Torrent Invites for Every Private Torrent Trackers. HDB, BTN, AOM, DB9, PTP, RED, MTV, EXIGO, FL, IPT, TVBZ, AB, BIB, TIK, EMP, FSC, GGN, KG, MTTP, TL, TTG, 32P, AHD, CHD, CG, OPS, TT, WIHD, BHD, U2 etc.

LOOKING FOR HIGH QUALITY SEEDBOX? EVOSEEDBOX.COM PROVIDES YOU BLAZING FAST & HIGH END SEEDBOXES | STARTING AT $5.00/MONTH!

xbtit 0day Vulnerability : Many Private Trackers DB's Has Been Stolen!


Recommended Posts

Y2iSFjJ.jpg
 
I'm just quoting this post(not popular for some reason):
submitted 1 month ago on reddit by uhx
 
Want free torrent site DBs?
I was pretty bored today and figured I might as well drop a tracker vuln. This for the newest xbtit.

news.php:              do_sqlquery("DELETE FROM {$TABLE_PREFIX}news WHERE id=".$_GET["id"],true);  
edit.php:   do_sqlquery("UPDATE {$TABLE_PREFIX}files SET filename='$fname', comment='" . AddSlashes($_POST["comment"]) . "', category=" . intval($_POST["category"]) . " WHERE info_hash='" . $torhash . "'",true);

Oh hey, that's a 0day. Not even going to bother finding all of the sites affected , but I'd imagine that'll be quite a few.
And here's some extra fun

http://funkytorrents.com/bookmark.php?torrent=195067 SQLi
http://xtremewrestlingtorrents.net/details.php?id=127998&thanks=1 SQLi in id param
http://tc-boxing.com/bookmark.php?torrent=45386 SQLi

DISCLAIMER: All the sites running xbtit have already had their DBs stolen and sold to the MAFIAA, so don't bother.

  • Upvote 1
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Check out what our members are saying

  • Our picks

×
×
  • Create New...