MyBB1.0.3-managegroup.txt

`>>>>>>>>originnal advisory<<<<<<<<<<<<<  
http://myimei.com/security/2006-02-10/mybb103managegroupphpmultiple-sqlinjection-xss.html  
-------------------Summary----------------  
Software: MyBB  
Sowtware’s Web Site: http://www.mybboard.com  
Versions: 1.0.3  
Class: Remote  
Status: Unpatched  
Exploit: Available  
Discovered by: <strong>imei addmimistrator</strong>  
Risk Level: <strong>high</strong>  
-----------------Description---------------  
There is a security bug in MyBB 1.0.3 software (latest version fully patched) file <strong>moderation.php </strong>that allows attacker performe an <strong>SQLINJECTION </strong>attack.<!--more--> bug is in result of poor checking quotes for "posts" input variable. Attacker with enough permissions in moderation and merging posts can perform any one of UPDATE / DELETE / and SELECT query on db.  
--------------Exploit----------------------  
mybb/moderation.php?posts=[firstpid]<strong>|</strong>[secondpid]<strong>'</strong>[SQL]  
&tid=[containertid]&action=do_multimergeposts&sep=hr  
--------------Solution---------------------  
Not Available  
--------------Credit-----------------------  
Discovered by: imei addmimistrator  
addmimistrator[4]gmail[O]com  
www.myimei.com  
security.myimei.com  
`