The Daily WTF: Curious Perversions in Information Technology
Welcome to TDWTF Forums Sign in | Join | Help
in Search
TheDailyWTF.com Forums
TDWTF Forums » The Daily WTF » "Side Bar" WTF » Open PHPMyAdmin Installations

Open PHPMyAdmin Installations

Last post 04-18-2008 5:06 PM by redct. 22 replies.
Page 1 of 1 (23 items)
Sort Posts: Previous Next

  • 04-15-2008 6:01 PM

    • redct
    • Not Ranked
    • Joined on 01-12-2008
    • Posts 43

    Open PHPMyAdmin Installations

    Reply Contact

    This just scares me.

    Who needs SQL injections when you can get direct access? 

  • 04-15-2008 6:07 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

     I know where the rest of my afternoon is going. :D

  • 04-15-2008 7:03 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact
    ShaggyB:

     I know where the rest of my afternoon is going. :D

    Adding Bobby Tables to various user lists?

  • 04-15-2008 11:01 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

     The sad thing is that many of their "user" tables have passwords in plain text. :(

  • 04-15-2008 11:31 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    Whoa, who knew the Pentagon relied on Open Source so much?

     

    Completely off-topic: can you guys help me with the following query?  It keeps returning an error for some reason...

    "UPDATE nukes SET target = 'France' WHERE (target = NULL)" 

    < pstorer> Bans don't mean shit on the forum. It's like being on the Sex Offender List. You can still entice kids into your van with candy.

    Want more? Go the IRC channel #TDWTFMafia on irc.slashnet.org.

    Farmer Brown is MasterPlanSoftware. He created a new forum account because he is obsessed with me after I scorned him. Ignoring his trolling is the best way to deal with the crybaby.

  • 04-15-2008 11:38 PM In reply to

    • redct
    • Not Ranked
    • Joined on 01-12-2008
    • Posts 43

    Re: Open PHPMyAdmin Installations

    Reply Contact

     

    morbiuswilters:

    Whoa, who knew the Pentagon relied on Open Source so much?

     

    Completely off-topic: can you guys help me with the following query?  It keeps returning an error for some reason...

    "UPDATE nukes SET target = 'France' WHERE (target = NULL)" 

    Hey guys, who wants jail time for messing with international governments? >.>

     

  • 04-16-2008 12:52 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    I just found a table which has, instead of a boolean value, a varchar which is either set to "X" or  an empty string. They probably want it to be "FileNotFound"-enabled.

    Filed under:

  • 04-16-2008 1:29 AM In reply to

    • NSCoder
    • Top 500 Contributor
    • Joined on 07-24-2005
    • Geneva, Switzerland
    • Posts 60

    Re: Open PHPMyAdmin Installations

    Reply Contact
    Use your powers only for good... fix their WTFy schemas, and maybe they'll leave out some tiny clothes for you.

  • 04-16-2008 3:54 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    morbiuswilters:

     

    "UPDATE nukes SET target = 'France' WHERE (target = NULL)" 

     

    try

    "UPDATE nukes SET target = 'France' WHERE (target IS NULL)" 
    Filed under:

  • 04-16-2008 4:07 AM In reply to

    • lanzz
    • Top 500 Contributor
    • Joined on 02-02-2007
    • Posts 64

    Re: Open PHPMyAdmin Installations

    Reply Contact
    Longwang:

    I just found a table which has, instead of a boolean value, a varchar which is either set to "X" or  an empty string. They probably want it to be "FileNotFound"-enabled.

    that would be the rarely-used "checkbox" SQL type.

  • 04-16-2008 9:53 AM In reply to

    • rbowes
    • Top 50 Contributor
    • Joined on 02-09-2007
    • Winnipeg, MB
    • Posts 412

    Re: Open PHPMyAdmin Installations

    Reply Contact

    Heh, I'm in government and somebody tried to make a page that exposed PHPMyAdmin. I wouldn't let them. Luckily, my government doesn't show up on that. :)

  • 04-16-2008 10:53 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact
    redct:
    Whoa!

    This whole thing is just wrong. LOL

    Join us at #TDWTF on irc.slashnet.org !

  • 04-16-2008 11:05 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    Pjotr G:

    try

    "UPDATE nukes SET target = 'France' WHERE (target IS NULL)"

    Well, that worked!  Thanks!  :-) 

    < pstorer> Bans don't mean shit on the forum. It's like being on the Sex Offender List. You can still entice kids into your van with candy.

    Want more? Go the IRC channel #TDWTFMafia on irc.slashnet.org.

    Farmer Brown is MasterPlanSoftware. He created a new forum account because he is obsessed with me after I scorned him. Ignoring his trolling is the best way to deal with the crybaby.
    Filed under:

  • 04-16-2008 11:49 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact
    I didn't notice anything from here. Surely there'd be some noise at least?
    A monk asked Joshu: isTrue(dog.hasBuddhaNature()) ?
    Joshu replied: FILENOTFOUND

  • 04-16-2008 12:31 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    redct:
     

    https://www.sutn.gov.sk/phpmyadmin/scripts/setup.php 

    this one is funny - it's server of our "Bureau of Technical Normalization (Standardization?)".

    anyways, i don't really see what mess could be done with it... yes, there's some configuration, but it appears to be such minor things as security (:-D), you can add a server (i tried it, but after reload it was gone), but no real data manipulation, or any way to it, visible to me. am i just undereducated, or am i right? 

    Sometimes I wish I could not post before I stop, and actually check whether there isn't anything similar to what i want to write...

  • 04-16-2008 12:39 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact
    SEMI-HYBRID code:
    anyways, i don't really see what mess could be done with it... yes, there's some configuration, but it appears to be such minor things as security (:-D), you can add a server (i tried it, but after reload it was gone), but no real data manipulation, or any way to it, visible to me. am i just undereducated, or am i right?
    When I read this my head was screaming honeypot. Permissions might be wrong too. I don't feel like testing it.
    irc://irc.slashnet.org/#TDWTF
    "You acquaint the SURLY THUGS with your brand of diplomacy."

  • 04-16-2008 12:40 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    It's a sad day when your site depends on google to block hackers.

     



    Enterprise Software Design Lifecycle:

    1) Receive business case approval
    2) Leverage a dynamic solution
    3) ???
    4) Value added = Profit!

  • 04-16-2008 2:33 PM In reply to

    • Kl4m
    • Not Ranked
    • Joined on 11-11-2007
    • Posts 14

    Re: Open PHPMyAdmin Installations

    Reply Contact

     alternative search, for renamed directories such as phpmyadmin_version/, but it has more false positives.

  • 04-16-2008 3:58 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    redct:
    anyways, i don't really see what mess could be done with it...
     

    I clicked on the link in the OP and browsed a few of the results at random.  Several of them took me to a page with a "control panel" syle interface.  And there's a button labelled "Drop".  Being a fan of Little Bobby Tables, I'm pretty sure I know what that button does.

     

     
    Filed under: ,

  • 04-17-2008 3:05 AM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    El_Heffe:

    SEMI-HYBRID code:
    anyways, i don't really see what mess could be done with it...
     

    I clicked on the link in the OP and browsed a few of the results at random.  Several of them took me to a page with a "control panel" syle interface.  And there's a button labelled "Drop".  Being a fan of Little Bobby Tables, I'm pretty sure I know what that button does.

     

     

     

    sorry, i wasn't clear enough - this "anyways, i don't really see what mess..." was aimed specifically at the page i gave link to. i know that there may be pages where you can alter records or drop tables, i got to some of them... but this question was meant for that one page. 

    Sometimes I wish I could not post before I stop, and actually check whether there isn't anything similar to what i want to write...

  • 04-17-2008 9:41 PM In reply to

    Re: Open PHPMyAdmin Installations

    Reply Contact

    redct:
    How many international governments are there???

    300 posts! This is Spar... dang I just lost the game.
    Legendary Thread
    lolwtf: Instead of comfy chair, package contained bobcat. Would not buy again.
    curtmack: It's like Godwin's Law, but instead of Hitler it's xkcd references.
    morbiuswilters: Right, but the Holocaust wasn't nearly as bad as xkcd.

  • 04-18-2008 8:47 AM In reply to

    • KNY
    • Not Ranked
    • Joined on 07-19-2006
    • Posts 27

    Re: Open PHPMyAdmin Installations

    Reply Contact

    Eternal Density:

    How many international governments are there???

     

    Well, the US for one.

    *ducks*

  • 04-18-2008 5:06 PM In reply to

    • redct
    • Not Ranked
    • Joined on 01-12-2008
    • Posts 43

    Re: Open PHPMyAdmin Installations

    Reply Contact

     

    KNY:

    Eternal Density:

    How many international governments are there???

     

    Well, the US for one.

    *ducks*

    Wow...

Page 1 of 1 (23 items)
Powered by Community Server (Non-Commercial Edition), by Telligent Systems