CVE-2005-2697

CVE-2005-2697 affects MyBB (MyBulletinBoard) 1.00 Release Candidate 1–4. The vulnerability is an SQL injection in search.php via the uid parameter, allowing a remote attacker to manipulate SQL queries and potentially disclose or modify data. This CVE overlaps with CVE-2005-0282. Connected sources...

MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection

mybb is dead /str0ke !/usr/bin/perl Crouz.Com Security Team EXPLOIT FOR: MyBulletinBoard Search.PHP SQL Injection Vulnerability Expl0it By: A l p h a P r o g r a m m e r sirius Email: [email protected] This Xpl Change Admin's Pass For L0gin With P0wer User HACKERS PAL & Devil-00 &...

Vul in MyBB

Hello The Injected File : search.php Discovered by: HACKERS PAL & Devil-00 & ABDUCTER Injected Versions :- Powered by MyBulletinBoard 1.00 Release Candidate 4 Powered by MyBulletinBoard 1.00 Release Candidate 3 Powered by MyBulletinBoard 1.00 Release Candidate 2 Powered by MyBulletinBoard 1.00...

CVE-2005-2580

CVE-2005-2580 affects MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch. The vulnerability stems from improper sanitization of user input, enabling SQL injection via the Username field in index.php or member.php, via the action parameter in search.php or member.php, or via the polloptions param...

mybb.pl.txt

!/usr/bin/perl -w SQL Injection Exploit for MyBulletinBoard MyBB .?/ && print "+ User ID is: $1\n"; print "- Unable to retrieve User ID\n" if!$1; $page = m/.?/ && print "+ MD5 hash of password is: $1\n"; print "- Unable to retrieve hash of password\n" if!$1;...

MyBBRC4.txt

SQL Injection Vulnerabilities in MyBB RC 4 +Security Patch Vendor: MyBB Group Version: MyBulletinBoard 1.00 RC4+ Security Patch Risk: High if magicquotesgpc = Off URL: http://www.mybboard.com "MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed...

MyBulletinBoard (MyBB) RC4 - 'polloptions' SQL Injection

source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise...

MyBulletinBoard (MyBB) RC4 - action SQL Injection

MyBulletinBoard MyBB RC4 - action SQL Injection source: https://www.securityfocus.com/bid/14553/info MyBulletinBoard is prone to multiple SQL injection vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

CVE-2005-1832

Multiple cross-site scripting XSS vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the 1 forums, 2 version, or 3 limit parameter to misc.php, 4 page or 5 datecut parameter to forumdisplay.php, 6 username, 7 email, or 8...

CVE-2005-1832

CVE-2005-1832 affects MyBulletinBoard (MyBB) 1.00 RC4 and earlier. Multiple XSS flaws allow remote attackers to inject arbitrary web script/HTML via various parameters across pages (misc.php, forumdisplay.php, member.php, memberlist.php, showthread.php, printthread.php). Root cause: unsanitized u...

CVE-2005-1833

CVE-2005-1833 describes multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4. The vulnerabilities allow remote attackers to execute arbitrary SQL commands through specific parameters in various scripts, including: calendar.php (eid), online.php (idsql), memberlist.php (userse...

CVE-2005-1811

Technical details for CVE-2005-1811 are not publicly available in the provided documents. Monitor for updates.

Multiple vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4

CODEBUG Labs Advisory 7 Title: Multiple vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 Author: Alberto Trivero English Version: Alberto Trivero Product: MyBulletinBoard 1.00 RC4 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.mybboard.com "MyBB is a powerful,...

CVE-2005-1833

Multiple SQL injection vulnerabilities in MyBulletinBoard MyBB 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to calendar.php, 2 idsql parameter to online.php, 3 usersearch parameter to memberlist.php, 4 pid parameter to editpost.php, 5 fid parameter to...

MyBB 1.0 RC4 XSS Bug

Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. MyBB has been designed with the end users in mind, you and your subscribers. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles and themes to the...

MyBulletinBoard (MyBB) RC4 - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to multiple SQL injection vulnerabilities...

MyBulletinBoard (MyBB) RC4 - Multiple Cross-Site Scripting SQL Injections

MyBulletinBoard MyBB RC4 - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/13827/info MyBB is prone to multiple cross-site scripting and SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...

CVE-2005-0282

SQL injection vulnerability in member.php in MyBulletinBoard MyBB allows remote attackers to execute arbitrary SQL commands via the uid parameter...

CVE-2005-0282

CVE-2005-0282 affects MyBB/MyBulletinBoard: SQL injection in member.php via the uid parameter, allowing remote command execution. The vulnerability arises from unsanitized input in the uid field, with CVSS v2 base score 7.5 (HIGH) and network access, low attack complexity, no authentication requi...

MyBB member.php 'uid' Parameter SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the avatar upload system via the 'uid' parameter of the member.php script. If PHP's 'magicquotesgpc' setting is disabled, can exploit this issue to...