MyBB AwayList Plugin (index.php, id parameter) SQL Injection Vulnerability

No description provided by source. Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : ?php $query = $db-simpleselect // 245 "awaylist", '', "id = '" . $mybb-input'id' . "'...