Design/Logic Flaw

MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...

CVE-2007-0689

MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...

CVE-2007-0689

MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...

CVE-2007-0689

CVE-2007-0689 affects MyBB 1.2.4. The vulnerability discloses the server installation path via three vectors: (1) MyBB member.php? and action[] parameter, (2) captcha.php?imagehash[] parameter, and (3) a direct request to inc/datahandlers/event.php. The common root cause is error message handling...

CVE-2007-0689: Undefined Security Weakness

MyBB 1.2.4 allows remote attackers to obtain sensitive information via the 1 action parameter to member.php, 2 imagehash parameter to captcha.php, and 3 a direct request to inc/datahandlers/event.php, which reveal the installation path in the resulting error message...

[Full-disclosure] MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 17 MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities Description: MyBB is a powerful, efficient and free forum package developed in PHP and MySQL. Full control over your discussion system is presented right at the tip of your fingers, from multiple styles...

Sql injection

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

Sql injection

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2211

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

CVE-2007-2212

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2212

CVE-2007-2212 affects MyBB (MyBulletinBoard)

CVE-2007-2211

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

CVE-2007-2212

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2211

CVE-2007-2211 corresponds to a SQL injection in calendar.php of MyBB (MyBulletinBoard)

MyBB calendar.php脚本远程SQL注入漏洞

MyBB是一款流行的Web论坛程序。 MyBB的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞非授权访问操作数据库。 MyBB的calendar.php脚本没有对year、month或day参数数据做充分的检查过滤，远程攻击者可以在输入数据中插入特定的SQL语句，导致攻击者浏览、添加或修改删除后端数据库中的信息。 MyBB MyBB = 1.2.5 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/ http://www.sebug.net/show-exp-1760.html...

CVE-2007-2212: Undefined Security Weakness

Multiple SQL injection vulnerabilities in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 year or 2 month parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-2211: Undefined Security Weakness

SQL injection vulnerability in calendar.php in MyBB aka MyBulletinBoard 1.2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the day parameter in a dayview action...

MyBulletinBoard (MyBB) <= 1.2.5 calendar.php Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV1 print " \n"; print " \n"; print " MyBulletinBoard = 1.2.5 Remote SQL Injection Exploit \n"; print " Bug found and Exploit coded by 0x86 \n"; print " \n"; print " www.geeksec.net \n"; print " 0x86 at...

MyBulletinBoard (MyBB) 1.2.2 - 'CLIENT-IP' SQL Injection

!/usr/bin/perl LOGO Mybb = 4.1 wwork: blind sql-inj ggoogle: Powered By MyBB coded by Elekt antichat.ru Coments Описание: Работа эксплойта основана на sql-инъекции в HTTPCLIENTIP. Неавторизованный пользователь может...

MyBulletinBoard (MyBB) 1.2.2 - CLIENT-IP SQL Injection

MyBulletinBoard MyBB 1.2.2 - CLIENT-IP SQL Injection !/usr/bin/perl LOGO Mybb = 4.1 wwork: blind sql-inj ggoogle: Powered By MyBB coded by Elekt antichat.ru Coments Описание: Работа эксплойта основана на sql-инъекции в HTTPCLIENTIP...