Hello,
I'm searching for a few information of phpBB (www.phpbb.com) security
flaws such as sql injection or other injection of code to get the
users password hash since forum
version 2.0.4 up to 2.0.10 or if possible also 2.0.11.

here just an example for what I'm searching for :
http://www.securityfocus.com/archive/1/358708

and especially I ask you for the following part in the link

********************[real-life sploit]********************

also known as "proof of concept" to see how the exploit is working.

For an answere I'll add a Tip of 10$ !

Good Luck!

---

Clarification of Question by 3m1n3m-ga on 10 Dec 2004 02:32 PST

Why I aon't got an answere or at least a comment yet?

I think 30$ + 10$ are much more then enough for such a question...

so why?

I can only speak for myself, but I would never gather and post a list
of known security flaws for such a widely used package on a publicly
accessible site. Even if you personally do not plan to use the
information to attack phpBB sites, someone else might. I don't want to
help them do it by gathering all the necessary info together in one
convenient place.

- Hammer

hi