MyBB KingChat Plugin - Persistent Cross-Site Scripting

MyBB KingChat Plugin - Persistent Cross-Site Scripting Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork...

MyBB Kingchat Cross Site Scripting

Exploit Title: MyBB 'kingchat' chat-box plugin. Google Dork: inurl:/kingchat.php? Date: 8/12/12 Author: VipVince Vendor Homepage: http://mods.mybb.com/ Software LinK: http://mods.mybb.com/view/kingchat Tested on: Windows Using the dork inurl:/kingchat.php? you will see multiple forums running thi...

MyBB kingchat 插件'username'参数SQL注入漏洞

BUGTRAQ ID: 56787 MyBB kingchat插件可允许您与其他用户交流。 MyBB kingchat插件的username参数没有正确过滤，存在SQL注入漏洞，成功利用可允许攻击者非法操作数据库，窃取信息。 0 MyBB kingchat 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://mods.mybb.com/view/kingchat Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork:...

MyBB KingChat Plugin SQLi Vulnerability

MyBB KingChat Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

myBB KingChat Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELE...

MyBB KingChat Plugin - SQL Injection

Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE...

MyBB KingChat Plugin - SQL Injection

MyBB KingChat Plugin - SQL Injection Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM...

MyBB KingChat SQL Injection

Exploit Title: KingChat MyBB plugin SQL Injection 0day Google Dork: inurl:"kingchat.php" Date: 13.10.2012 Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/view/kingchat Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE...

MyBB 1.6.8 multiple full-path disclosure vulnerability

Exploit for php platform in category web applications Title: MyBB 1.6.8 FPD Author: KrypTiK Vendor or Software Link: www.mybb.com/downloads Version: MyBB 1.6.8 Latest Category: webapps Google Keywords: intext:Powered By MyBB, © 2002-2012 MyBB Group Tested on: Linux 1...

CVE-2012-5908

Cross-site scripting XSS vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to admin/index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to admin/index.php...

Sql injection

SQL injection vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditionsusergroup parameter in a search action to admin/index.php...

CVE-2012-5908

CVE-2012-5908 is a Cross-site Scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.6.6. The issue arises in admin/modules/user/users.php where an attacker can inject arbitrary script or HTML via the conditions[usergroup][] parameter in a search action to admin/index.php. The provided documen...

CVE-2012-5909

The CVE covers a SQL injection in MyBB (MyBulletinBoard) 1.6.6. Affected component: admin/modules/user/users.php; root cause: unsafely constructed SQL via the conditions[usergroup][] parameter in a search action to admin/index.php. Impact is partial confidentiality/integrity/availability as per C...

CVE-2012-5909

SQL injection vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to execute arbitrary SQL commands via the conditionsusergroup parameter in a search action to admin/index.php...

CVE-2012-5908

Cross-site scripting XSS vulnerability in admin/modules/user/users.php in MyBB aka MyBulletinBoard 1.6.6 allows remote attackers to inject arbitrary web script or HTML via the conditionsusergroup parameter in a search action to admin/index.php...

MyBB FollowerUser插件'usid'参数SQL注入漏洞

BUGTRAQ ID: 56366 MyBB是一款流行的Web论坛程序。通过FollowerUser插件可根据用户配置文件跟踪用户。 FollowerUser插件1.5及其他版本存在SQL注入漏洞，当"uid"设置为当前用户ID、"suscriberuser"设置为"yes"，通过"usid"参数发送到misc.php的输入没有正确在"SuscribeUsersadd" 函数 inc/plugins/SuscribeUsers.php 内过滤，及被用在SQL查询中。通过注入任意SQL代码，可被利用操作SQL查询。 0 MyBB Follower User 1.x 厂商补丁： MyBB...

MyBB Follower User Plugin - SQL Injection

MyBB Follower User Plugin - SQL Injection Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on...

MyBB Follower User Plugin - SQL Injection

Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Zixem Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...

MyBB Follower User 1.5 SQL Injection

Exploit Title: Follower User MyBB plugin SQL Injection 0day Google Dork: intext:"Users subscribed to" inurl:member.php -site:fwcombie.us Date: 13.10.2012 Exploit Author: Th3FreakPony Software Link: http://mods.mybb.com/view/suscriber-user Version: 1.5+ Tested on: Linux...