mybb v1.1.1(rss.php) SQL Injection Exploit

---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...

mybb v1.1.1(showthread.php) SQL Injection Exploit

---------------------------------- foud by: Breeeeh Site: http://www.alshmokh.com Email: [email protected] ---------------------------------- $query = $db-query"SELECT pid FROM ".TABLEPREFIX."posts WHERE tid='$tid' $visible ORDER BY dateline LIMIT $start, $perpage"; while$getid =...