MyBB 1.8.x < 1.8.2 Multiple Vulnerabilities

Binary data 8618.prm...

MyBB 1.8.2 MyBBlog 跨站脚本漏洞

No description provided by source...

MyBB 1.8.1 /member.php SQL注入漏洞

注册时post参数questionid存在SQL注入 http://xxx/mybb/member.php?action=register...

CVE-2014-9241

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

CVE-2014-9240

SQL injection vulnerability in member.php in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the questionid parameter in a doregister action...

Sql injection

SQL injection vulnerability in member.php in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the questionid parameter in a doregister action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

CVE-2014-9241

MyBB 1.8.x is affected by multiple XSS vulnerabilities exploiting parameters in various admin/user-facing paths: (1) type in report.php, (2) signature in do_editsig via usercp.php, (3) title in style-templates during edit_template, and (4) file in config-languages during edit to admin/index.php. ...

CVE-2014-9240

CVE-2014-9240 affects MyBB (MyBulletinBoard) 1.8.x before 1.8.2. The vulnerability is an SQL injection in member.php, exploitable via the question_id parameter in a do_register action, allowing remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (NV...

CVE-2014-9240

SQL injection vulnerability in member.php in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the questionid parameter in a doregister action...

CVE-2014-9241

Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the 1 type parameter to report.php, 2 signature parameter in a doeditsig action to usercp.php, or 3 title parameter in the...

MyBB 1.8.2 /inc/class_core.php 代码执行漏洞

No description provided by source...

Mybb 1.8.1 /report.php 跨站脚本漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register from termcolor import cprint class TestPOCPOCBase: vulID = '1629' version = '1' author = 'chensy @ Knownsec'...

MyBB 1.8.2 unset_globals() Bypass / Remote Code Execution

MyBB - 2014.11.21 MyBB's unsetglobals function can be bypassed under special conditions and it is possible to allows remote code execution. I. MyBB's unsetglobals Function Bypass When PHP's register\globals configuration set on, MyBB will call unset\globals function, all global variables register...

MyBB <= 1.8.2 RCE Vulnerability - Active Check

MyBB is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

MyBB unset_globals()function is bypassed leading to remote code execution analysis-vulnerability warning-the black bar safety net

Yesterday in the exploit-db see Ryat cow made a MyBB remote code execution vulnerability, the analysis is very detailed, unfortunately it is written in English, where the simple translation. When registerglobals=On, MyBB will call unsetglobalsfunction to achieve registerglobals=Off. | 1 2 3 4 5 6...

MyBB 1.8.2 - unset_globals() Function Bypass Remote Code Execution

MyBB 1.8.2 - unsetglobals Function Bypass Remote Code Execution Exploit Title: MyBB - 2014.03.06 MyBB's unsetglobals function can be bypassed under special conditions and it is possible to allows remote code execution. I. MyBB's unsetglobals Function Bypass When PHP's register\globals configurati...

MyBB 1.8.2 - unset_globals() Function Bypass and Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB - 2014.03.06 MyBB's unsetglobals function can be bypassed under special conditions and it is possible to allows remote code execution. I. MyBB's unsetglobals Function Bypass When PHP's register\globals configuration set on,...

MyBB 1.8.2 - 'unset_globals()' Function Bypass / Remote Code Execution

Exploit Title: MyBB - 2014.03.06 MyBB's unsetglobals function can be bypassed under special conditions and it is possible to allows remote code execution. I. MyBB's unsetglobals Function Bypass When PHP's register\globals configuration set on, MyBB will call unset\globals function, all global...

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting

MyBB Forums 1.8.2 - Persistent Cross-Site Scripting Exploit Title:Stored XSS vulnerability in MyBB 1.8.2 Date: 16th November'2014 Exploit Author: Avinash Kumar Thapa Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/download/ Version: MyBB 1.8.2 latest Tested on: Operating...