Mybb-XSS_SQL_RCE-POC

Mybb-XSSSQLRCE-POC Mybb يربط CVE-2021-27890 & CVE-2021-27889 بـ RCE poc قبل الاستخدام: يوجد ملفان هنا: 1.js و attacklisten.py يجب تعديل هذين الملفين: 1.js: عدّل رابط منتدى mybb ورابط الهجوم: root@kitploit: var bashurl = 'http://192.168.92.164/mybb/mybb-mybb1825' mybb forum url var attackurl =...

CVE-2021-27890

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...

MyBB 1.8.25 - Chained Remote Command Execution

Exploit Title: MyBB 1.8.25 - Chained Remote Command Execution Exploit Author: SivertPL [email protected] Date: 19.03.2021 Description: Nested autourl Stored XSS - templateset second order SQL Injection leading to RCE through improper string interpolation in eval. Software Link:...

CVE-2021-27890

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...

CVE-2021-27890

SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files...

CVE-2021-27890

Summary of CVE-2021-27890 (MyBB SQL Injection) Affects MyBB versions prior to 1.8.26, where a SQL injection vulnerability exists via theme properties included in theme XML files. The issue is described as a SQL Injection vulnerability without publicly detailed exploit steps in the initial descrip...