Sql injection

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...

CVE-2011-4569

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...

CVE-2011-4569

CVE-2011-4569 describes an SQL injection in MyBB’s Userbar Plugin (userbarsettings.php) for MyBB, via the image2 parameter in version 2.2. The vulnerability is exploitable remotely with network access and low complexity, allowing arbitrary SQL commands and partial impacts on confidentiality, inte...

MyBB 1.x 多个安全漏洞

BUGTRAQ ID: 50816 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在跨站脚本执行、跨站请求伪造和其他多个安全漏洞，攻击者可利用这些漏洞在受影响站点用户浏览器中执行任意脚本，窃取cookie验证凭证，泄露或修改敏感信息或这些非法操作。 1）好友列表中的未解析头像中存在错误； 2）通过用户名传递的输入在返回给用户之前没有正确过滤，导致在受影响站点的用户浏览器中执行任意HTML和脚本代码； 3）应用允许用户通过HTTP请求执行某些操作，但不验证这些请求。可在用户浏览特制的网页时更改语言设置。 MyBB 1.x 厂商补丁： MyBB ----...

MyBB Advanced Forum Signatures (afsignatures) Plugin 'signature.php' SQLi Vulnerability

MyBB with Advanced Forum Signatures afsignatures Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MyBB MyStatus Plugin process-mystatus.php 'statid' Parameter SQLi Vulnerability

MyBB with MyStatus Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyBB Userbar Plugin 'userbarsettings.php' SQLi Vulnerability

MyBB with Userbar Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyBB 1.6.4 Backdoor PHP Remote Code Execution

A version of MyBB 1.6.4 with a backdoor was detected on the remote host. The MyBB source code repository was compromised, and backdoor code was added to allow arbitrary PHP execution. The backdoor is present in MyBB 1.6.4 downloaded on or before October 6, 2011. A remote, unauthenticated attacker...

MyBB MyStatus 3.1 SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus插件"statid" SQL注入漏洞

MyBB是一款流行的Web论坛程序。 MyStatus插件中的"statid"参数传递到process-mystatus.php的输入没有正确过滤就用在SQL查询中，在实现上存在SQL注入漏洞，恶意用户可利用此漏洞执行SQL注入攻击。 MyBB MyStatus Plugin for MyBB 3.x 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...

MyBB MyStatus 3.1 - SQL Injection

MyBB MyStatus 3.1 - SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 - SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 SQL Injection Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

MyBB Forum Userbar 2.2 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

MyBB Advanced Forum Signatures 2.0.4 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures (afsignatures-2.0.4) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

myBB 1.6.4 Backdoor Exploit

$Id: mybbbackdoor.rb 13850 2011-10-10 15:40:59Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection

MyBB Forum Userbar Plugin Userbar 2.2 - SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...