CVE-2021-27946

creationtimestamp| type| source ---|---|--- 2021-09-21 06:42:55+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/30 2024-11-14 06:08:28+00:00| seen| MISP/60184575-ec7d-47ac-be8c-95bcd21b1009...

MyBB 1.8.25 - Poll Vote Count SQL Injection Vulnerability

Exploit Title: MyBB 1.8.25 - Poll Vote Count SQL Injection Exploit Author: SivertPL email protected Description: Lack of sanitization in the "votes" parameter in "Edit Poll" causes a second-order semi-blind SQL Injection that is triggered when performing a "Move/Copy" operation on the thread...

MyBB 1.8.25 - Poll Vote Count SQL Injection

Exploit Title: MyBB 1.8.25 - Poll Vote Count SQL Injection Exploit Author: SivertPL [email protected] Date: 20.03.2021 Description: Lack of sanitization in the "votes" parameter in "Edit Poll" causes a second-order semi-blind SQL Injection that is triggered when performing a "Move/Copy"...

MyBB SQL注入漏洞（CVE-2021-27946）

...

CVE-2021-27946

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. issue 1 of 3...

CVE-2021-27946

CVE-2021-27946 : MyBB before 1.8.26 is vulnerable to an SQL injection in the poll vote count due to lack of sanitization of the votes[] parameter in Edit Poll. Exploitation can occur during a Move/Copy operation and may enable privilege escalation for moderators/administrators in some configurati...