Aand Jamie does it yet again. Talks shit about himself on another account only to turn around and go "aaa I wish I never registered here ever I ruined it for everyone". Anyways... (Also no I'm not yet another Jamie account)

---

By the way, there's a major exploit in the new reply page that I found today: one can steal password hashes via an unsanitised $_POST value (passenc). It's useless without the salt, but worth mentioning regardless. (The board also uses MD5 for hashing which is pretty insecure).

---

Giving it a second look passwords aren't even salted, just MD5 hashed. If you hash your password externally through md5sum and compare to the hash in passenc it will be identical. Frankly this probably isn't that much of a vulnerability, you will only see your own hash and you would need to spam requests to brute force a hash in an identical way to brute forcing the login page. The fact it passes this hash unsanitised into an SQL query is concerning but magic_quotes takes care of that, nothing out of the ordinary for Acmlmboard.

And then there's the random places that don't sanitise input properly (e.g. mood avatar selection in the post box and usermood.php itself), but they can't really be exploited as you can't escape the quoted string they are in thanks to magic_quotes. You can still break queries with it (e.g. creating empty threads or peeking in people's user mood avatars), and the fact you can upload mood avatars when not logged in is hilarious, but no actual SQL injection looks to be possible.

All in all though, seeing a place like this fall into disarray with no real maintainer to check up on it from time to time is just a tad bit depressing. I would quite like to see someone here becoming a moderator to take care of the regular spam and Jamie's mood swings (whether that be me or some ROM hacking regular here), I feel that would bring a lot of life to a forum that currently feels like an abandoned, autonomous ghost town. Some codebase fixups would be nice too and of course bringing back the uploader, I'd be willing to help with it if that's necessary.

____________________
Average phpBB fan:
Average Acmlmboard enjoyer: