Joo!BB 0.7.2 Blind SQL Injection

Code

<img src="http://www.joobb.org/components/com_joobb/assets/emotions/skype/skype_0130-devil.gif" title="Devil" alt="Devil" class="jbEmotion" /> code <img src="http://www.joobb.org/components/com_joobb/assets/emotions/skype/skype_0116-evilgrin.gif" title="Evil Grin" alt="Evil Grin" class="jbEmotion" />

Re: Joo!BB 0.7.0 Blind SQL Injection

Hi freedom,

sorry for removing the code.

Did you find an another way to hack Joo!BB?
If so, please let me know!!!

Many thanks,
Robbie

Re: Joo!BB 0.7.0 Blind SQL Injection

Hello Robbie,

I thought I reported this injection for some time back.
Is it solved now?

Thanks and keep up the good work.

Hennepdesk

Re: Joo!BB 0.7.0 Blind SQL Injection

I think it is not solved, since in my database who that creates set of forums, it occurs automatically!
You can look a picture of the screen phpmyadmin
http://joobb.ru/sql.jpg

p.s. I am sorry for my bad English

Re: Joo!BB 0.7.0 Blind SQL Injection

Here about what I speak, any user can create the message even not not authorized
http://community.sonixsoft.de/index.php?option=com_joobb&view=editpost&layout=joobb

Re: Joo!BB 0.7.2 Blind SQL Injection

hi freedom,

this problem is fixed. I will create a new release today.

thx for your report!

kind regards,
robbie

Re: Joo!BB 0.7.2 Blind SQL Injection

About thanks, I also would like to integrate component JAM PMS, I can help you with it?

Re: Joo!BB 0.7.2 Blind SQL Injection

Thank you Robbie for Quickly updating the code.
Good to see JooBB devolping rapidly.

It would be super if JooBB would use JAM.
Also 1.5 native and last weekend a new release of JAM.

Keep it green,

Hennepdesk

Re: Joo!BB 0.7.2 Blind SQL Injection

hi freedom,

I'm sorry, but Joo!BB is Freeware, not Open Source. At least until 1.0. Than I will see if it becomes Open Sorce or still remains Freeware.

I'm about to design an interface to other Joomla Components.

Kind regards,
Robbie

Re: Joo!BB 0.7.2 Blind SQL Injection

I.e. Joo! BB will be subsequently paid?

Re: Joo!BB 0.7.2 Blind SQL Injection

No, I don't think that it will become commercial in anyway. Maybe donate software. But we will see.

Sooner or later I would like to cover my costs. Until now I pay everything from my own pocket.

But I think, I will find a way to cover the costs when Joo!BB becomes a little bit more popular. Maybe advertising...

hey... I have studied business administration/economic computer science