CODEWITHSUNDEEP
mybb
SuperAdmin
SuperAdmin

Reputation: 548

Why is this SQL injection harmful?

I have a mybb forum that I have found is vulnerable to a SQL injection. I have performed said SQL injection on the site, but I don't understand why this data is sensitive. For security reasons, I have not disclosed my website, but an end ample found in the internet is pictured below. Can someone explain to me why this data should not be publically known?

http://uploaderx.persiangig.com/C/mybb_sqli_error.png

Upvotes: 0

Views: 121

Answers (2)

Jones
Jones

Reputation: 31

This is a simple PHP warning and no SQL Injecetion.

Upvotes: 3

Dave Jemison
Dave Jemison

Reputation: 704

Your data may not be sensitive, but your site would be VERY sensitive to someone issuing a series of DROP TABLE commands through SQL injection. You could very easily find your site nothing but error messages no matter what page you visited.

And if you didn't have a recent backup (you DO do frequent backups, right??), your site would be pretty much dead and you would have to start from scratch.

Upvotes: 2

Related Questions