2280 matches found
CVE-2012-2326
MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting
CVE-2012-2325
CVE-2012-2325 is a SQL injection vulnerability in the User Inline Moderation feature of the Admin Control Panel (ACP) in MyBB (MyBulletinBoard) , fixed in version 1.6.7. The flaw allows remote administrators to execute arbitrary SQL commands via unspecified vectors, impacting data confidentiality...
PT-2012-1339 · Mybb · Mybb
Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.6.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 do search action to "search.php" or 2 do stuff action to "private.php". The vendor disputes this...
MyBB 1.6.8 'announcements.php'远程SQL注入漏洞
BUGTRAQ ID: 54130 MyBB是一款流行的Web论坛程序。 MyBB 1.6.8没有正确过滤用户提供的输入即用在SQL查询中，导致攻击者利用此漏洞控制应用、访问或修改数据或利用下层数据库中的其他漏洞。 0 MyBB 1.6.8 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...
Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
a bug in Mybb 1.6.8 'announcements.php' that allows to us to occur a Sql Injection on a Remote machin. Exploit Title : Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.mybb.com/ Security Risk...
MyBB 'member.php' SQLi Vulnerability
MyBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...
MyBB 1.6.8 - 'member.php' SQL Injection
source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...
MyBB 1.6.8 - member.php SQL Injection
MyBB 1.6.8 - member.php SQL Injection source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromi...
MyBB 1.6.8 With AdvancedProfile 3.1 SQL Injection
-------------------- IN The NAme OF God -------------------- -====MyBB 1.6.8 Sql Injection Vulnerability====- Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====-...
MyBB version 1.6.8 suffers from a remote SQL injection vulnerability
No description provided by source. Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====- inurl:member.php?action=profile&uid= inurl:action=profile&uid=27 -====Exploit====-...
MyBB 1.6.7之前版本多个安全漏洞
BUGTRAQ ID: 53417 MyBB是一款流行的Web论坛程序。 MyBB 1.6.7之前版本在实现上存在多个安全漏洞，成功利用后可允许攻击者执行任意脚本代码、窃取Cookie身份验证凭证、控制应用、访问或修改数据或利用底层数据库中的其他漏洞并访问敏感数据。 0 MyBB 1.6.x MyBB 1.4.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...
MyBB 1.6.6 index.php SQL注入和跨站脚本执行漏洞
MyBB 'moderation.php' SQL注入漏洞+多个远程PHP代码执行漏洞 MyBB是一款基于PHP的WEB应用程序。 MyBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意代码. 问题是由于'forumdisplay.php'和'search.php'脚本对用户提交的'fid'参数处理缺少充分过滤，提交恶意数据，在获得"sid"的情况下，可导致任意代码执行。 注入:...
MyBB 1.6.6 'index.php' SQL注入和跨站脚本执行漏洞
BUGTRAQ ID: 52743 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在SQL注入漏洞和跨站脚本执行漏洞，利用这些漏洞可允许攻击者执行任意脚本代码、窃取cookie验证凭证、控制应用、访问或修改数据 0 MyBB 1.6.6 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/ SQL-injection: POST /mybb/admin/index.php?module=user-users&action=search HTTP/1.1...
MyBB 1.6.6 Cross Site Scripting / SQL Injection
Exploit Title: Multiple vulnerabilities in mybb 1.6.6 Google Dork: intext:"Powered By MyBB" Date: 26th March 2012 Author: Aditya Modha Software Link: http://www.mybb.com/downloads Version: 1.6.6 Tested on: ubuntu CVE : Just applied / Y \ / Y /| Y \ /| \ / Y \ | / | | | | | |/|| / | |\ || | | /...
MyBB 1.6.6之前版本多个安全漏洞
BUGTRAQ ID: 51962 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行脚本代码、窃取Cookie身份验证凭证、泄露或修改敏感信息或执行非法操作。 0 MyBB 1.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...
MyBB 1.6.4 RCE
MyBB 1.6.4 unauthorized backdoored command exec Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
MyBB 'tags.php' XSS Vulnerability
MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...
MyBB 1.6.5 suffers from a cross site scripting vulnerability
No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接： /tags.php?tag="prompt/SEBUG@TEST/ ''' class TestPOCPOCBase: vulID = '26119' ssvid version =...
MyBB 1.6.5 Cross Site Scripting
Exploit Title: 0-day MyBB 1.6.5 XSS Vulnerability Date: 25/12/2011 - 18:30 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: [email protected] Software Website: http://www.mybb.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: inurl:"tags.php" intext:"MyBB 1.6.5" Vulnerabl...
