MyBB MyYoutube Cross Site Scripting

Exploit Title: MyYoutube MyBB Stored XSS Date: 17.12.2012 Exploit Author: limb0 Vendor Homepage: http://www.mybb-es.com/ Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Category:Web Security Tested on: Linux +-----------------------------------------------------+ Stored-XSS...

MyBB User Profile Skype ID Plugin 1.0 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Test...

MyBB Profile Skype ID Cross Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0...

MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link:...

MyBB Xbox Live ID Post SQLi & Persistent XSS Vulnerabilities

Exploit for php platform in category web applications MyBB Xbox Live ID Post SQLi & Persistent XSS This a really easy one to exploit, user input is not sanitized at all and so is injected into the database as the following lines: if isset$mybb-input'xli' $xli-userupdatedata'xli' = $mybb-input'xli...

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites Version: 0.2.2 Tested on: PHP Reason:...

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link:...

MyBB Social Sites 0.2.2 Cross Site Scripting

Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites Version: 0.2.2 Tested on: PHP Reason:...

MyYoutube MyBB Plugin 1.0 - SQL Injection

MyYoutube MyBB Plugin 1.0 - SQL Injection Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link:...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2...

MyBB DyMy User Agent Plugin (newreply.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We...

MyBB DyMy User Agent SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB DyMy User Agent Plugin - newreply.php SQL Injection

MyBB DyMy User Agent Plugin - newreply.php SQL Injection Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username...

MyYoutube MyBB Plugin 1.0 - SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...

MyBB MyYoutube 1.0 SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...

MyBB DyMy User Agent Plugin - 'newreply.php' SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...