MyBB 1.8.25 - Chained Remote Command Execution

Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...

CVE-2021-27889

creationtimestamp| type| source ---|---|--- 2021-03-15 19:29:06+00:00| seen| https://t.me/cibsecurity/24904 2021-03-22 10:14:45+00:00| exploited| https://t.me/infobes/301 2021-03-29 05:54:18+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2955 2024-11-14 06:08:18+00:00|...