MyBB 1.1.2 New XSS

// MyBB 1.1.2 New XSS File :- private.php Ver. :- $do = $mybb-input'do'; Line :- 260 Action :- Preview HTTP Proof :-...

CVE-2006-2589

SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...

Sql injection

SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...

CVE-2006-2589

Vulnerability overview (CVE-2006-2589) : The affected software is MyBB (MyBulletinBoard) version 1.1.1, specifically the rss.php component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via the comma parameter. The description notes uncertaint...

mybb v1.1.1(rss.php) SQL Injection Exploit

---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...

mybb111.txt

---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...

Sql injection

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2336

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2333

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

Sql injection

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2336

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2333

CVE-2006-2333 concerns MyBB 1.1.1 where multiple SQL injection flaws allow remote attackers to run arbitrary SQL through the email address during registration for a mail-verified forum, due to improper handling in (1) usercp.php and (2) member.php. The vulnerability permits injected SQL commands ...

CVE-2006-2333

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2336

CVE-2006-2336 describes an SQL injection in MyBB (MyBulletinBoard) 1.1.1 via the comma parameter in showthread.php, allowing remote command execution. The affected component is the showthread.php handler; the underlying issue is improper input handling that enables arbitrary SQL execution. Exploi...

mybb v1.1.1(showthread.php) SQL Injection Exploit

---------------------------------- foud by: Breeeeh Site: http://www.alshmokh.com Email: [email protected] ---------------------------------- $query = $db-query"SELECT pid FROM ".TABLEPREFIX."posts WHERE tid='$tid' $visible ORDER BY dateline LIMIT $start, $perpage"; while$getid =...

MyBB <= 1.1.1 showthread.php comma Parameter SQL Injection

Binary data 3561.prm...

MyBB 1.1.1 - showthread.php SQL Injection

MyBB 1.1.1 - showthread.php SQL Injection source: https://www.securityfocus.com/bid/17904/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful attack could all...

[KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-activation-sql-injection-attack.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.1 Class: Remote Status: Unpatched Exploit: Available Solution: Available...

MyBB 1.1.1 - 'showthread.php' SQL Injection

source: https://www.securityfocus.com/bid/17904/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

CVE-2006-2103

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...