CVE-2013-6936

CVE-2013-6936 describes multiple SQL injection vulnerabilities in the Ajaxfs plugin (MyBB), specifically in ajaxfs.php via the tooltip and usertooltip parameters in the Ajax forum stat plugin 2.0. Remote attackers could execute arbitrary SQL commands. OpenVAS notes a WillNotFix remediation.

CVE-2013-6936: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat Ajaxfs Plugin 2.0 for MyBB aka MyBulletinBoard allow remote attackers to execute arbitrary SQL commands via the 1 tooltip or 2 usertooltip parameter...

PT-2013-6194

Name of the Vulnerable Software and Affected Versions MyBB Ajaxfs Plugin version 2.0 Description The issue concerns SQL injection vulnerabilities in the ajaxfs.php file of the Ajax forum stat Plugin for MyBB. Remote attackers can execute arbitrary SQL commands by manipulating the tooltip or...