MyBB TagCloud 2.0 Cross Site Scripting

==================================================== MYBB TagCloud 2.0 cross site scripting vulnerability ==================================================== Author: http://www.3ethicalhackers.com Discovered by: http://www.3ethicalhackers.com Original post: http://www.3ethicalhackers.com...

Advanced Stats On Indexing Portal 3.1 Cross Site Scripting

+--------------------------+-------------------------------+ | 3 Ethical Hackers . com | +--------------------------+-------------------------------+ irc.smashthestack.org 3ethical Affected software: Advanced Stats On Indexing plugin for mybb php bbs Versions: ".$thread'subject'." ".$lang-asoiby....

CVE-2009-4813

Cross-site scripting XSS vulnerability in myps.php in MyBB aka MyBulletinBoard 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action...

Cross site scripting

Cross-site scripting XSS vulnerability in myps.php in MyBB aka MyBulletinBoard 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action...

CVE-2009-4813

CVE-2009-4813 describes a cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) version 1.4.10, specifically in the script file myps.php. The issue arises when processing the donate action where the username parameter is not properly sanitized, allowing a remote attacker to inject ar...

CVE-2009-4813

Cross-site scripting XSS vulnerability in myps.php in MyBB aka MyBulletinBoard 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a donate action...

MyBB 1.4.12 <= Full Path Disclosure

Exploit for php platform in category web applications =================================== MyBB 1.4.12 = Full Path Disclosure =================================== Exploit Title: MyBB 1.4.12 = Full Path Disclosure Software MyBB 1.4.X Date: 2010-04-19 Author: GLOBUS Software Link: http://mybboard.net...

MyBB &lt;= 1.4.11 论坛口令重置功能弱随机数漏洞

BUGTRAQ ID: 39404 MyBB是一款流行的Web论坛程序。 MyBB的口令重置实现在生成口令重置令牌和随机口令时使用了弱随机数，如果Web服务器重新使用了PHP进程的话攻击者就可以破解口令入侵任意账号。 MyBB在多处使用了mtsrand函数对随机数生成器提供种子： // Setup a unique posthash for attachment management if!$mybb-input'posthash' && $mybb-input'action' != "editdraft" mtsranddouble microtime 1000000; $postha...

MyBB set_common_header()邮件BCC头注入漏洞

BUGTRAQ ID: 39400 MyBB是一款流行的Web论坛程序。 MyBB的口令重置实现中存在邮件注入漏洞，远程攻击者可以通过简单的URL控制就可以向BCC:邮件头中注入代码，将保密的口令重置邮件发送到BCC: 头所指向的邮箱。 在MailHandler类的setcommonheader方式中，以下代码负责向所有发出的邮件（包括口令重置邮件）中添加一些常用的头： $this-headers .= "Message-ID: $msgid$this-delimiter"; $this-headers .= "Content-Transfer-Encoding:...

MyBB < 1.4.12 Multiple Vulnerabilities

Binary data 5513.prm...

Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: MyBB Password Reset Email BCC: Injection Vulnerability Release Date: 2010/04/13 Last Modified: 2010/04/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: MyBB = 1.4.11 Severity: An email injection vulnerability i...

Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability

SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: MyBB Password Reset Weak Random Numbers Vulnerability Release Date: 2010/04/13 Last Modified: 2010/04/13 Author: Stefan Esser stefan.esseratsektioneins.de Application: MyBB = 1.4.11 Severity: Usage of weak random number...

GUI MyBB 2002-2010 exploit

Exploit for php platform in category web applications ========================== GUI MyBB 2002-2010 exploit ========================== !/usr/local/bin/ruby GUI MyBB 2002-2010 04/04/10 Whivack Contact Me = email protected Dork Google : "Moteur MyBB, 2002-2010 MyBB Group." No Security : No Captcha...

MyBB 2002-2010 exploit

Exploit for php platform in category web applications ====================== MyBB 2002-2010 exploit ====================== !/usr/local/bin/ruby MyBB Owned 30/03/10 Ruby Code By, Whivack Gsk Win32 and Ruby Interpreter 1.8.6 Dork Google : "Moteur MyBB, 2002-2010 MyBB Group." Sensitive URL :...

MyBB 1.4 admin remote code execution vulnerability

在index.php文件336行左右代码如下： //index.php,336行左右 $plugins-runhooks"indexend"; //出现了eval函数，注意参数 eval"$index = "".$templates-get"index"."";"; outputpage$index; /code 看以下eval函数中的内容是否可以控制，继续找到templates类查看get函数的定义 code //inc/classtemplates.php,65行左右 function get$title, $eslashes=1, $htmlcomments=1 global...

MyBB adodb_mktime()日期参数远程拒绝服务漏洞

CVE ID：CVE-2009-4448 MyBB是一款流行的基于PHP的论坛程序。 MyBB inc/functionstime.php文件中包含的adodbmktime函数在处理部分日期值时存在漏洞，攻击者提交包含超大的year参数值的报文就会触发大量循环，导致CPU负载过高造成拒绝服务攻击。 MyBB 1.4.10 用户可参考如下安全公告获得补丁信息： http://dev.mybboard.net/projects/mybb/repository/revisions/4613/diff/branches/1.4-stable/inc/functionstime.php...

CVE-2009-4449

Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery...

Design/Logic Flaw

inc/functionstime.php in MyBB aka MyBulletinBoard 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of service CPU consumption via a crafted request with a large year value, which triggers a long loop, as reachable through member.php and possibly other vectors...

Directory traversal

Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery...

CVE-2009-4449

Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery...