MyBB 1.0 - 'Globa.php' Cookie Data SQL Injection

source: https://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can allow an attacker to bypass authentication and ga...

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection

Ultimate Bulletin Board 6.06.2 - UBBER Cookie HTML Injection source: https://www.securityfocus.com/bid/8212/info Ultimate Bulletin Board has been reported prone to a HTML injection vulnerability. The issue likely presents itself due to a lack of sanitization performed on cookie data. It has been...

IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution (2)

source: https://www.securityfocus.com/bid/7361/info It has been reported that IkonBoard is prone to an arbitrary command execution vulnerability. The vulnerability is due to insufficient sanitization performed on user supplied cookie data. An attacker may exploit this issue to execute arbitrary...