MyBB editpost.php SQL Injection

MyBB...

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection MyBB...

MyBB <1.6.9 (editpost.php, posthash) SQL Injection Vulnerability

Exploit for php platform in category web applications MyBB 1.6.9 is vulnerable to Stored, Error based, SQL Injection. Vulnerable code: /editpost.php === Line 398 === $posthashquery = "posthash='$posthash' OR "; === It can be done by using Tamper DataOr Live HTTP Headers, and when submitting a pos...

MyBB 1.6.9 - 'editpost.php?posthash' Blind SQL Injection

MyBB...

MyBB AwayList Plugin (index.php, id parameter) SQL Injection Vulnerability

No description provided by source. Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : ?php $query = $db-simpleselect // 245 "awaylist", '', "id = '" . $mybb-input'id' . "'...

MyBB AwayList Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : simpleselect // 245 "awaylist", '', "id = '" . $mybb-input'id' . "...

MyBB HM My Country Flags - SQL Injection

MyBB HM My Country Flags - SQL Injection Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability...

MyBB HM My Country Flags SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection...

MyBB HM My Country Flags - SQL Injection

Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability. If we go to a thread we'll see a countr...

MyBB AwayList SQL Injection

Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : simpleselect // 245 "awaylist", '', "id = '" . $mybb-input'id' . "'" // 246 ; // 247 $item = $db-fetcharray$query; // 24...

MyBB AwayList Plugin - index.php?id SQL Injection

MyBB AwayList Plugin - index.php?id SQL Injection Exploit Title: AwayList MyBB plugin SQLi 0day Exploit Author: RedHat Team Vect0r Software Link: http://mods.mybb.com/view/awaylist Tested on: Windows & Linux. Vulnerable code : simpleselect // 245 "awaylist", '', "id = '" . $mybb-input'id' . "'" /...

MyBB 1.6.9 full path disclosure

Exploit for windows platform in category web applications MyBB has released its update on 15th December. MyBB 1.6.9 is still affected with full path disclosure vulnerablity author : cyb3rboy website: freemium-devils.in code104.net greetz cyberace, ketan , shubham , S3v3n , th3 d3stroyer , amol th...

MyBB Profile Xbox Live ID SQL Injection Vulnerability

Profile Xbox Live ID allows you to add your xbl gamertag to your profile. Title: MyBB Profile Xbox Live ID SQL Injection Vendor: http://mods.mybb.com/view/profile-xbox-live-id Author: Josephvb10 Exploit Author: n3urot0xin Code: function profilexliupdate$xli global $mybb; if isset$mybb-input'xli'...

MyTube MyBB Plugin 1.0 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyTube MyBB Plugin Stored XSS Date: 18/12/2012 Exploit Author: Kim Kun Bum Vendor by: Software Link: http://mods.mybb.com/view/mytube Version: 1.0 Category:Web Security Tested on: Windows7 Reason : Lack of input validation in...

MyBB Transactions Plugin - transaction SQL Injection

MyBB Transactions Plugin - transaction SQL Injection source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can explo...

MyBB Bank Transactions 2.0 SQL Injection

Exploit Title: MyBB Bank Transactions Plugin SQL Injection Google Dork: inurl:bank.php?transactions= Date: 13.12.2012 Exploit Author: limb0 Vendor Homepage: http://mods.mybb.com/view/transactions Software Link: www.kingofpersia.ir Version: 2.0 Category:Web Security Tested on: Linux...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Stored XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Category:Web Security Tested on: Linux P-XSS Installation: 1...

MyBB Profile Skype ID 1.0 Cross Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

MyBB MyTube 1.0 Cross Site Scripting

Exploit Title: MyTube MyBB Plugin Stored XSS Date: 18/12/2012 Exploit Author: Kim Kun Bum Vendor by: Software Link: http://mods.mybb.com/view/mytube Version: 1.0 Category:Web Security Tested on: Windows7 Reason : Lack of input validation in Youtube ID field...

MyBB Transactions Plugin - 'transaction' SQL Injection

source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...