2280 matches found
MyBB 1.0 Globa.PHP Cookie Data SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16082/info MyBB is prone to an SQL injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'admin/globa.php' script. Successful exploitation can allow an attack...
MyBB 1.0.1/1.0.2 Notepad UserCP.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16361/info MyBB is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script co...
MyBulletinBoard (MyBB) <= 1.2.11 private.php SQL Injection Exploit (2)
No description provided by source. ?php // forum mybb = 1.2.11 remote sql injection vulnerability // bug found by Janek Vind waraxe http://www.waraxe.us/advisory-64.html // exploit write by c411k not brutforce one symbol. insert hash in your PM in one action // // POST...
MyBB 1.0.3 Private.PHP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16678/info MyBB is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass...
MyBB <= 1.4.6 - Remote Code Execution Exploit
No description provided by source. ?PHP / Someone decided to contact mybb's staff informing about this vulnerability with the obvious result that this will not work anymore. Fucking moron. I'm releasing a non-finished version of the exploit. No help, PoC and with the necessity of --admindir flag...
TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities
No description provided by source...
MyBB 1.0.2/1.0.3 Managegroup.PHP SQL Injection Vulnerability
No description provided by source...
MyBB 1.4.10 'myps.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37464/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
MyBB 1.4.8 'search.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36460/info MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
MyBB 1.1.1 Showthread.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17904/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an...
MyBB <= 1.2.10 'moderation.php' Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27323/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromis...
MyYoutube MyBB Plugin 1.0 - SQL Injection
No description provided by source. Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:Youtube Video intitle:Profile of Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube...
MyBB 1.4.2 'moderation.php' Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31935/info MyBB is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...
MyBB 1.0.3 Moderation.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain...
MyBB 1.10 Member.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17492/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an...
MyBB 1.0.3 Managegroup.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16692/info MyBB is prone to a cross-site scripting vulnerability.. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in t...
myBB KingChat Plugin - SQL Injection
No description provided by source. Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:kingchat.php Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : ?php $username=$GET'username';...
MyBB AwayList Plugin (index.php, id parameter) - SQL Injection Vulnerability
No description provided by source. Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : ?php $query = $db-simpleselect // 245 awaylist, '', id = ' . $mybb-input'id' . ' // 2...
MyBB KingChat Plugin - Persistent XSS
No description provided by source. Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you...
MyBB MyStatus 3.1 - SQL Injection Vulnerability
No description provided by source. ?--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...