CVE-2011-5278

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

Mybb Plugin uploader任意文件上传漏洞

Bugtraq ID:66109 Mybb Plugin uploader是一款MyBB文件上传插件。 Mybb Plugin uploader不正确文件上传实现，允许攻击者利用漏洞上传任意php文件并执行。 0 Mybb Plugin uploader 1.1.2 目前没有详细解决方案提供： http://mods.mybb.com/download/plugin-uploader Exploit : http://localhost/mybb/admin/index.php?module=config-plugins&action=pluginuploader Info : Put...

MyBB < 1.6.12 Multiple Vulnerabilities

According to its version number, the MyBB install hosted on the remote web server is affected by multiple vulnerabilities : - A cross-site scripting flaw exists in misc.php due to improper validation of input when generating a small popup list of smilies. This allows a remote attacker to create a...

MyBB Uploader 1.1.2 Shell Upload

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

CVE-2014-1840

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

Cross site scripting

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

CVE-2014-1840

Cross-site scripting XSS vulnerability in Upload/search.php in MyBB 1.6.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter in a dosearch action, which is not properly handled in a forced SQL error message...

CVE-2014-1840

CVE-2014-1840 affects MyBB 1.6.12 and earlier; vulnerability in Upload/search.php (do_search) allows XSS via the keywords parameter, triggered by mishandling in a forced SQL error message. This is a remote-access flaw with MEDIUM severity (CVSS v2 base score 4.3). Evidence from multiple sources c...

MyBB sid SQLi Vulnerability

MyBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...

MyBB < 1.6.11 Multiple Vulnerabilities

According to its version number, the MyBB install running on the remote web server is affected by multiple vulnerabilities : - A flaw exists in which accounts without login keys can be hijacked. - An information disclosure vulnerability exists due to improper implementation of UTF8. A remote...

MyBB 1.6.12 SQL Injection

IIIIIIII RRRRRRRRRRRR HHHHHHHH HHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRRRRRRRR HHHHHHHHHHHHHHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIII RRRR RRRR HHHH HHHH IIIIIIII RRRRRRRR RRRRRR...

MyBB 'search.php'跨站脚本漏洞

BUGTRAQ ID: 65344 CVECAN ID: CVE-2014-1840 MyBB是一个功能完整并且非常实用的论坛软件。 MyBB 1.6.12及其他版本没有正确过滤search.php的参数值，在实现上存在跨站脚本漏洞，攻击者可利用此漏洞在受影响站点上下文中的用户浏览器内执行任意脚本代码。 0 MyBB MyBB 1.6.12 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybb.com/ html body form name="exploit"...

MyBB Database Fingerprint

This module checks if MyBB is running behind an URL. Also uses a malformed query to force an error and fingerprint the backend database used by MyBB on version 1.6.12 and prior. Module Options msf use auxiliary/gather/mybb/dbfingerprint msf undefineddbfingerprint show actions ...actions... msf...

MyBB 1.6.12 - misc.php Remote Denial of Service

MyBB 1.6.12 - misc.php Remote Denial of Service source: https://www.securityfocus.com/bid/65545/info MyBB is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. MyBB 1.6.12 is vulnerable; oth...

MyBB 1.6.12 - 'misc.php' Remote Denial of Service

source: https://www.securityfocus.com/bid/65545/info MyBB is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. MyBB 1.6.12 is vulnerable; other versions may be also be affected. Mybb All...

MyBB Extended Useradmininfo Plugin 1.2.1 - Cross-Site Scripting

Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site Scripting Google Dork: N/A Date: 09.02.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage: http://forum.mybboard.de/user-9022.html Software Link: http://mods.mybb.com/view/extended-useradmininfo...

MyBB Extended Useradmininfo Plugin 1.2.1 - Cross-Site Scripting

MyBB Extended Useradmininfo Plugin 1.2.1 - Cross-Site Scripting Exploit Title: Extended Useradmininfo MyBB Plugin 1.2.1 - Cross Site Scripting Google Dork: N/A Date: 09.02.2014 Exploit Author: Fikri Fadzil - [email protected] Vendor Homepage: http://forum.mybboard.de/user-9022.html...

MyBB 1.6.12 XSS Vulnerability

MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

MyBB 1.6.12 POST Cross Site Scripting

alert/XSS/ " / document.exploit.submit;...

CVE-2013-7288

Cross-site scripting XSS vulnerability in the mycodeparsevideo function in inc/classparser.php in MyBB aka MyBulletinBoard before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via vectors related to Yahoo video URLs...