MyBB Forums 1.8.2 - Persistent Cross-Site Scripting

Exploit Title:Stored XSS vulnerability in MyBB 1.8.2 Date: 16th November'2014 Exploit Author: Avinash Kumar Thapa Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/download/ Version: MyBB 1.8.2 latest Tested on: Operating System: Windows 8.1 Browser Used : Mozilla Firefox...

MyBB 1.8.1 Cross Site Scripting / SQL Injection

Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2 / PHP 5 localhost Vendor: mybb.com Version: = 1.8.1 - Latest ATM Contact: [email protected] Author: Smash Latest MyBB forum software suffers on multiple vulnerabilities, including SQL Injection and Cross...

MyBB 1.8.X - Multiple Vulnerabilities

Latest MyBB forum software suffers on multiple vulnerabilities, including SQL Injection and Cross Site Scripting. Such bugs may allow attacker to perform remote sql queries against the database, and so on. Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2...

MyBB 1.8.x - Multiple Vulnerabilities

Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2 / PHP 5 localhost Vendor: mybb.com Version: = 1.8.1 - Latest ATM Contact: [email protected] Author: Smash Latest MyBB forum software suffers on multiple vulnerabilities, including SQL Injection and Cross...

MyBB 1.8.x - Multiple Vulnerabilities

MyBB 1.8.x - Multiple Vulnerabilities Title: MyBB 1.8.X - Multiple Vulnerabilities Date: 13.11.2014 Tested on: Linux / Apache 2.2 / PHP 5 localhost Vendor: mybb.com Version: = 1.8.1 - Latest ATM Contact: [email protected] Author: Smash Latest MyBB forum software suffers on multiple...

MyBB Profile Blogs Plugin SQL Injection

An SQL injection vulnerability has been reported in MyBB Profile Blogs Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

MyBB Profile Albums SQL Injection

An SQL injection vulnerability has been reported in MyBB Profile Albums. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

KingChat myBB Plugin SQL Injection

An SQL injection vulnerability has been reported in KingChat MyBB Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

MyBB MyBBlog 1.0 Cross Site Scripting

Title : MyBB MyBBlog 1.0 Plugin Cross Site Scripting Author : DevilScreaM Date : 24 October 2014 Category : Web Applications Vendor : https://github.com/JN-Jones/MyBBlog Download : http://community.mybb.com/mods.php?action=view&pid=221 Version : 1.0 Greetz : newbie-security.or.id | Borneo Securit...

MyBB User Social Networks Plugin 1.2 - Stored XSS

No description provided by source. Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting Google Dork: N/A Date: 05.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage - N/A Software Link: http://mods.mybb.com/view/user-social-networks...

MyBB User Social Networks Plugin 1.2 - Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting Google Dork: N/A Date: 05.09.2014 Exploit Author: Fikri Fadzil - email protected Vendor Homepage - N/A Software Link: http://mods.mybb.com/view/user-social-networks...

MyBB User Social Networks Plugin 1.2 - Persistent Cross-Site Scripting

Exploit Title: User Social Networks MyBB Plugin 1.2 - Cross Site Scripting Google Dork: N/A Date: 05.09.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage - N/A Software Link: http://mods.mybb.com/view/user-social-networks Version: 1.2 Tested on: PHP Description:...

MyBB 1.8 Beta 3 - Multiple Vulnerabilities

No description provided by source. Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected]...

MyAwards MyBB Module - Cross-Site Request Forgery

MyAwards MyBB Module - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/69386/info MyAwards module for MyBB is prone to a cross-site request-forgery vulnerability. An attacker may exploit this issue to perform certain unauthorized actions. This may lead to further attacks...

MyAwards MyBB Module - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/69386/info MyAwards module for MyBB is prone to a cross-site request-forgery vulnerability. An attacker may exploit this issue to perform certain unauthorized actions. This may lead to further attacks. Versions prior to MyAwards 2.4 are vulnerable...

MyBB 1.6.15 Cross Site Request Forgery

Google Dork: allinurl:myawards.php Date: 08/17/2014 Exploit Author: Vagineer https://vagineering.me Version: ALL VERSIONS Tested on: MyBB 1.6.15 PoCset this as your signature or iframe it Add awards img...

MyBB 1.8 Beta 3 - Multiple Vulnerabilities

MyBB 1.8 Beta 3 - Multiple Vulnerabilities Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact:...

MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Vulnerabilities

Exploit for php platform in category web applications Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3...

MyBB 1.8 Beta 3 Cross Site Scripting / SQL Injection

Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...

MyBB Multiple Vulnerabilities (Aug 2014)

MyBB is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...