MyBB 1.8 Beta 3 - Multiple Vulnerabilities

Title: MyBB 1.8 Beta 3 - Cross Site Scripting & SQL Injection Google Dork: intext:"Powered By MyBB" Date: 15.08.2014 Author: DemoLisH Vendor Homepage: http://www.mybb.com/ Software Link: http://www.mybb.com/downloads Version: 1.8 - Beta 3 Contact: [email protected] a Cross Site Scripting in...

CVE-2014-5248

Cross-site scripting XSS vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode...

CVE-2014-5248

Cross-site scripting XSS vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode...

CVE-2014-5248

MyBB

MyBB 1.1.7 - Multiple HTML Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/19718/info MyBB is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would...

MyBulletinBoard (MyBB) <= 1.2.10 Remote Code Execution Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ?php // magicquotesgpc needs to be off errorreporting0; inisetmaxexecutiontime,0; inisetdefaultsockettimeout,5; if $argc5 print -------------------------------------------------------------------------\r\n; print MyBB = 1.2.10...

MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection

No description provided by source. ?--------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

Facebook Profile MyBB Plugin 2.4 - Persistant XSS

No description provided by source. Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS...

MyBB AJAX Chat - Persistent XSS Vulnerability

No description provided by source. Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability lies within the...

MyBB DyMy User Agent Plugin (newreply.php) - SQL Injection Vulnerability

No description provided by source. Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live...

Social Sites MyBB Plugin 0.2.2 - Cross Site Scripting

No description provided by source. Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites...

MyBB Profile Albums Plugin 0.9 (albums.php, album parameter) - SQL Injection

No description provided by source. Exploit Title: Profile Albums MyBB plugin SQL Injection 0day Google Dork: inurl:albums.php intext:powered by Mybb Date: 14.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/profilealbums Version: 0.9 Tested on: Linux...

MyBB Bank- 3 Plugin - SQL Injection

No description provided by source. Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : ?php $user=$POST'rusername'; $pay=intval$POST'rpay'; $queryr=$db-querySELECT FROM...

MyBB Ajaxfs 2 Plugin - SQL Injection Vulnerability

No description provided by source. Mybb Ajaxfs Plugin Sql Injection vulnerability @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@...

myBB 1.6.4 Backdoor Exploit

No description provided by source. $Id: mybbbackdoor.rb 13838 2011-10-09 03:22:07Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities

No description provided by source. Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:Profile Blogs for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version:...

MyBB Follower User Plugin - SQL Injection

No description provided by source. Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:Users subscribed to inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

MyBB <= 1.6.11 - Remote Code Execution Using Admin Privileges

No description provided by source. ?php Exploit Title: MyBB = 1.6.11 Remote Code Execution Using Admin Privileges Date: 30/11/2013 Exploit Author: BlackDream Vendor Homepage: www.mybb.com Software Link: http://www.mybb.com/download/latest Version: = 1.6.11 Tested on: Linux Thanks to:...

MyBulletinBoard (MyBB) <= 1.1.3 (usercp.php) Create Admin Exploit

No description provided by source. !/usr/bin/perl MyBulletinBoard MyBB = 1.1.3 Create An Admin Exploit www.h4ckerz.com / hackerz.ir / aria-security.net / Myimei.com / ./2006-6-23 Coded By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $una...