CVE-2010-4628

CVE-2010-4628 affects MyBB (MyBulletinBoard) prior to 1.4.12. A superfluous SQL COUNT call in member.php allows remote attackers to cause resource consumption by triggering scans of the entire users table, leading to DoS. The referenced sources indicate the vulnerability, with no explicit exploit...

MyBB 1.6 <= SQL Injection Vulnerability

================================= MyBB 1.6 = SQL Injection Vulnerability ================================= 1. OVERVIEW Potential SQL Injection vulnerability was detected in MyBB. 2. APPLICATION DESCRIPTION MyBB is a free bulletin board system software package developed by the MyBB Group. It's...

MyBB 1.6 SQL Injection

================================= MyBB 1.6 /search.php POST /mybb/search.php action=dosearch&forums=2&keywords='+or+'a'+'a&postthread=1 = /private.php POST /mybb/private.php mypostkey=&keywords='+or+'a'+'a&quicksearch=Search+PMs&allbox=Check+All&fromfid=0&fid=4&jumpto=4&action=dostuff 6. SOLUTION...

MyBB 1.6 <= SQL Injection Vulnerability

================================= MyBB 1.6 = SQL Injection Vulnerability ================================= 1. OVERVIEW Potential SQL Injection vulnerability was detected in MyBB. 2. APPLICATION DESCRIPTION MyBB is a free bulletin board system software package developed by the MyBB Group. It's...

MyBB 1.6 - search.php?keywords SQL Injection

MyBB 1.6 - search.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker t...

MyBB 1.6 - 'search.php?keywords' SQL Injection

source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

MyBB 1.6 - 'private.php?keywords' SQL Injection

source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modif...

MyBB 1.6 - private.php?keywords SQL Injection

MyBB 1.6 - private.php?keywords SQL Injection source: https://www.securityfocus.com/bid/45565/info MyBB is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker ...

MyBB 1.6 <= Cross Site Scripting (XSS) Vulnerability

============================================ MyBB 1.6 = Cross Site Scripting XSS Vulnerability ============================================ 1. OVERVIEW MyBB was vulnerable to Cross Site Scripting Vulnerability. 2. APPLICATION DESCRIPTION MyBB is a free bulletin board system software package...

MyBB 1.6 Cross Site Scripting

============================================ MyBB 1.6 alert/XSS/&quotedids=&lastpid=1&frompage=1&tid=1&method=quickreply&message=test&previewpost=Preview Post 6. SOLUTION Upgrade to 1.6.1 7. VENDOR MyBB Development Team http://www.mybb.com/ 8. CREDIT This vulnerability was discovered by Aung Khan...

MyBB Cross Site Scripting

MyBB all version tags.php?tag= - Cross-Site Scripting XSS & HTML Injection http://www.mybb.com 12-12-2010 Poc: http://infectionsupport.com/tags.php?tag= "alertString.fromCharCode88,83,83 http://infectionsupport.com/tags.php?tag=" Google dork: powered by mybb inurl:tags.php?tag= by Teamelite...

MyBB 1.4.10 - tags.php Cross-Site Scripting

MyBB 1.4.10 - tags.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45388/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

MyBB 1.4.10 - 'tags.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45388/info MyBB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

MyBB v1.6 Full Path Disclosure Vulnerability

Exploit for php platform in category web applications ============================================ MyBB v1.6 Full Path Disclosure Vulnerability ============================================ Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB...

MyBB 1.6 Path Disclosure

Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor Alerted, Awaiting Vendor Respon...

Path disclosure in MyBB

Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor Alerted, Awaiting Vendor Respon...

MyBB 1.6 - Full Path Disclosure

Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor Alerted, Awaiting Vendor Respon...

MyBB 1.6 - Full Path Disclosure

MyBB 1.6 - Full Path Disclosure Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed, Vendor...

Installation Path Disclosure Weakness in MyBB

High-Tech Bridge SA Security Research Lab has discovered a weakness in MyBB which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in MyBB The weakness exists due to application reveals the full path to installation directory in an...

MYBB 1.6 (admin/index.php) XSS Vulnerabilities

Exploit for php platform in category web applications ============================================== MYBB 1.6 admin/index.php XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...