MyBB Plugin 2.4 Facebook Profile Persistant XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Teste...

MyBB AJAX Chat - Persistent Cross-Site Scripting

MyBB AJAX Chat - Persistent Cross-Site Scripting Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability li...

MyBB ChangUonDyu Extra File Chatbox Persistent XSS Vulnerability

Popular inferno-like chatbox built for MyBB! ChangUonDyu Extra File Chatbox Persistent XSS Location: Chatbox Notice Vendor: http://community.mybb.com/thread-63559.html PoC: function buildnotice global $fcbfile,$smilies; $noticef = filegetcontents$fcbfile'notice'; $handle =...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB AJAX Chat - Persistent Cross-Site Scripting

Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability lies within the chatframe.php page. Persistent /...

MyBB TipsOfTheDay Cross Site Scripting / SQL Injection

Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...

MyBB Profile Blogs Plugin 1.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...

MyBB AJAX Chat Persistent XSS Vulnerability

Exploit for php platform in category web applications Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Category: Webapps Version: 1 Tested on: Windows The Persiste...

MyBB Bank-v3 Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'";...

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities

Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on:...

MyBB TipsOfTheDay Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested o...

MyBB Bank- 3 Plugin - SQL Injection

Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'"; $fetch=$db-fetcharray$queryr; ? The variable...

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities

Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...

MyBB Bank- 3 Plugin - SQL Injection

MyBB Bank- 3 Plugin - SQL Injection Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'";...

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...

MyBB Bank v3 SQL Injection

Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'"; $fetch=$db-fetcharray$queryr; ? The variable...

MyBB Profile Blogs 1.2 Cross Site Scripting / SQL Injection

Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...

MyBB KingChat Plugin Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork...

MyBB KingChat Plugin - Persistent Cross-Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...