Lucene search
+L

2266 matches found

Packet Storm
Packet Storm
added 2018/04/09 12:00 a.m.27 views

MyBB Recent Threads On Index 17.0 Cross Site Scripting

Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyBB forum. 2. Proof of concept:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/04/09 12:00 a.m.31 views

MyBB Plugin Recent Threads On Index - Cross-Site Scripting

Exploit Title: MyBB Recent threads Date: 4th April 2018 Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyBB forum. 2. Proof of concept:...

5.3AI score
SaveExploits0
zdt
zdt
added 2018/04/09 12:00 a.m.31 views

MyBB Recent Threads On Index Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Recent threads Exploit Author: Perileos Software Link: https://community.mybb.com/mods.php?action=view&pid=191 Version: 17.0 Tested on: Windows 10 1. Description: This plugin shows recent threads in the side bar on your MyB...

0.1AI score
SaveExploits0
zdt
zdt
added 2018/04/05 12:00 a.m.32 views

MyBB Downloads 2.0.3 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=854 Version: 2.0.3 Tested on: Ubuntu 17.10 ...

0.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2018/04/05 12:00 a.m.100 views

MyBB Downloads 2.0.3 Cross Site Scripting

Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS Date: 3/28/18 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=854 Version: 2.0.3 Tested on: Ubuntu 17.10 1. Description: It is a plugin which add...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/04/05 12:00 a.m.41 views

MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting

Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS Date: 3/28/18 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=854 Version: 2.0.3 Tested on: Ubuntu 17.10 1. Description: It is a plugin which add...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/04/05 12:00 a.m.24 views

MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting

MyBB Plugin Downloads 2.0.3 - Cross-Site Scripting Exploit Title: MyBB Downloads Plugin v2.0.3 - Persistent XSS Date: 3/28/18 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=854 Version: 2.0.3 Tested on:...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2018/03/27 12:00 a.m.15 views

FreeBSD : mybb -- multiple vulnerabilities (d50a50a2-2f3e-11e8-86f8-00e04c1ea73d)

mybb Team reports : Medium risk: Tasks Local File Inclusion Medium risk: Forum Password Check Bypass Low risk: Admin Permissions Group Title XSS Low risk: Attachment types file extension XSS Low risk: Moderator Tools XSS Low risk: Security Questions XSS Low risk: Settings Management XSS Low risk:...

6.3AI score
SaveExploits0References2
Packet Storm
Packet Storm
added 2018/03/23 12:00 a.m.23 views

MyBB Last User's Threads In Profile 1.2 Cross Site Scripting

Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS Date: 3/19/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=910 Version: v1.2 Tested on: Ubuntu 17.10 1. Description:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2018/03/23 12:00 a.m.48 views

MyBB Plugin Last User's Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting

Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS Date: 3/19/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=910 Version: v1.2 Tested on: Ubuntu 17.10 1. Description:...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2018/03/23 12:00 a.m.11 views

MyBB Plugin Last Users Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting

MyBB Plugin Last Users Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS Date: 3/19/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link:...

6.7AI score
SaveExploits0
zdt
zdt
added 2018/03/23 12:00 a.m.16 views

MyBB Last Users Threads in Profile Plugin 1.2 - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Last User's Threads in Profile Plugin v1.2 - Persistent XSS Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=910 Version: v1.2 Tested...

7.1AI score
SaveExploits0
FreeBSD
FreeBSD
added 2018/03/15 12:00 a.m.19 views

mybb -- multiple vulnerabilities

mybb Team reports: Medium risk: Tasks Local File Inclusion Medium risk: Forum Password Check Bypass Low risk: Admin Permissions Group Title XSS Low risk: Attachment types file extension XSS Low risk: Moderator Tools XSS Low risk: Security Questions XSS Low risk: Settings Management XSS Low risk:...

7.1AI score
SaveExploits0References1
zdt
zdt
added 2018/02/27 12:00 a.m.30 views

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS Date: 2/21/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=411 Version: 1.3 Tested on:...

0.1AI score
SaveExploits0
exploitpack
exploitpack
added 2018/02/27 12:00 a.m.18 views

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting

MyBB My Arcade Plugin 1.3 - Cross-Site Scripting Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS Date: 2/21/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=411 Version: 1.3 Tested on: Ubuntu...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2018/02/27 12:00 a.m.9 views

MyBB Cross-Site Scripting Vulnerability (CNVD-2018-05067)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A cross-site scripting vulnerability exists in MyBB version 1.8.14. A remote attacker can use the...

5.4CVSS6.6AI score0.00597EPSS
SaveExploits0References1
Packet Storm
Packet Storm
added 2018/02/27 12:00 a.m.25 views

MyBB My Arcade 1.3 Cross Site Scripting

Exploit Title: MyBB My Arcade Plugin v1.3 - Persistent XSS Date: 2/21/2018 Author: 0xB9 Contact: luxorforums.com/User-0xB9 or 0xB9atprotonmail.com Software Link: https://community.mybb.com/mods.php?action=view&pid=411 Version: 1.3 Tested on: Ubuntu 17.10 1. Description: The My Arcade plugin adds ...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2018/02/22 12:00 a.m.10 views

MyBB Cross-Site Request Forgery Vulnerability (CNVD-2018-05796)

MyBB aka MyBulletinBoard is a free and web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A security vulnerability exists in MyBB version 1.8.14, which stems from the program's failure to...

4.9CVSS7AI score0.00363EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2018/02/22 12:00 a.m.29 views

MyBB <= 1.8.14 CSRF Vulnerability

MyBB is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

4.9CVSS5.2AI score0.00363EPSS
SaveExploits1References1
NVD
NVD
added 2018/02/21 8:29 p.m.19 views

CVE-2018-7305

MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts...

4.9CVSS5.3AI score0.00363EPSS
SaveExploits1References1
Rows per page
Query Builder