Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCEPOC Mybb associa CVE-2021-27890 & CVE-2021-27889 al POC RCE Prima dell'uso: Ci sono due file qui: 1.js e attacklisten.py Devi modificare questi due file: 1.js: modifica l'url del forum Mybb e l'url dell'attacco: root@kitploit: var bashurl = 'http://192.168.92.164/mybb/mybb-mybb1825'...

MyBB 1.8.25 - Chained Remote Command Execution

Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...

CVE-2021-27889

creationtimestamp| type| source ---|---|--- 2021-03-15 19:29:06+00:00| seen| https://t.me/cibsecurity/24904 2021-03-22 10:14:45+00:00| exploited| https://t.me/infobes/301 2021-03-29 05:54:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2955 2024-11-14 06:08:18+00:00|...