RE: MyBB Exploitation via Open Merge Directory 03-01-2014, 08:08 PM
#20
(03-01-2014, 07:36 PM)Crossfaith Wrote: hello, i have tried changing the username into mine but when i try to merge it i get an error.
Code:MyBB has experienced an internal SQL error and cannot continue. SQL Error: 1054 - Unknown column 'failedlogin' in 'field list' Query: INSERT INTO mybb_users (`usergroup`,`additionalgroups`,`displaygroup`,`import_usergroup`,`import_additionalgroups`,`import_displaygroup`,`import_uid`,`username`,`password`,`salt`,`loginkey`,`email`,`regdate`,`lastactive`,`lastvisit`,`website`,`showsigs`,`signature`,`showavatars`,`timezone`,`avatardimensions`,`avatartype`,`avatar`,`lastpost`,`icq`,`aim`,`yahoo`,`msn`,`hideemail`,`allownotices`,`regip`,`lastip`,`longregip`,`longlastip`,`language`,`passwordconvert`,`passwordconverttype`,`postnum`,`invisible`,`birthday`,`birthdayprivacy`,`subscriptionmethod`,`receivepms`,`receivefrombuddy`,`pmnotice`,`pmnotify`,`showquickreply`,`ppp`,`tpp`,`daysprune`,`timeformat`,`dst`,`buddylist`,`ignorelist`,`style`,`away`,`awaydate`,`returndate`,`referrer`,`referrals`,`reputation`,`timeonline`,`showcodebuttons`,`totalpms`,`unreadpms`,`pmfolders`,`notepad`,`threadmode`,`showredirect`,`dateformat`,`dstcorrection`,`warningpoints`,`moderateposts`,`moderationtime`,`suspendposting`,`suspensiontime`,`suspendsignature`,`suspendsigtime`,`coppauser`,`classicpostbit`,`loginattempts`,`failedlogin`,`usernotes`,`uid`,`usertitle`,`awayreason`) VALUES ('4','','','4','','','1','derpety','16d0ef1952fdaed62cf6a71ddf4ea543','cGgoB9YM','eP84NtCkG8r4fHvrkQS6ia6wRhJLMxCtbif36i4FHOKH4Pfz76','cool@cool.cool','1393040957','1393040957','1393040957','','1','','1','0','','0','','0','','','','','0','1','199.254.238.143','','-939594097','0','','','','0','0','','all','0','1','0','1','1','1','0','0','0','','0','','','0','0','0','','0','0','0','0','1','0','0','','','','1','','0','0','0','0','0','0','0','0','0','0','1','0','','','','')
but when i check it on my db4free database, i can't find the failedlogin column. thanks for the awesome tut by the way,
Did you import the SQL file correctly? Did you get any errors when doing that?
















![[+]](https://sinister.li/images/modern/collapse_collapsed.png)