MyBB Bank- 3 Plugin - SQL Injection

No description provided by source. Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : ?php $user=$POST'rusername'; $pay=intval$POST'rpay'; $queryr=$db-querySELECT FROM...

MyBB Bank- 3 Plugin - SQL Injection

Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'"; $fetch=$db-fetcharray$queryr; ? The variable...