CVE-2006-3761: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/functionspost.php in MyBB aka MyBulletinBoard 1.0 RC2 through 1.1.4 allows remote attackers to inject arbitrary web script or HTML via a javascript URI with an SGML numeric character reference in the url BBCode tag, as demonstrated using "javascript"...

CVE-2006-3759

Unspecified vulnerability in MyBB aka MyBulletinBoard 1.1.4, related has unspecified impact and attack vectors related to "user group manipulation."...

CVE-2006-3758: Undefined Security Weakness

inc/init.php in Archive Mode Light in MyBB aka MyBulletinBoard 1.1.4 calls the extract function with EXTROVERWRITE on HTTP POST and GET variables, which allows remote attackers to overwrite arbitrary variables, as demonstrated via an SQL injection using the SERVERHTTPCLIENTIP parameter in...

MyBB HTTP Header 'CLIENT-IP' Field SQLi

The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'CLIENT-IP' request header before using it in a database query when initiating a session in the inc/classsession.php script. A remote attacker c...

mybb-sql-115.php.txt

!/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB" "2006 MyBB Group"\n\n"; / works...

MyBulletinBoard (MyBB) <= 1.1.5 (CLIENT-IP) SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB"...

MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection

!/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB" "2006 MyBB Group"\n\n"; / works...

CVE-2006-3420

Cross-site request forgery CSRF vulnerability in editpost.php in MyBulletinBoard MyBB before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action. NOTE: the...

CVE-2006-3420

CVE-2006-3420 affects MyBulletinBoard (MyBB) prior to version 1.1.5. The issue is a cross-site request forgery (CSRF) in editpost.php that lets an attacker perform actions as a logged-in user, including deleting arbitrary forum posts, by using a bbcode IMG tag with a modified delete parameter in ...

kapda-50.txt

KAPDA::50MyBB 1.1.4 Multiple Vuln SQLInjection & XSS ------- KAPDA New Advisory . http://www.kapda.ir/advisory-349.html ORIGINAL ADVISORY: http://myimei.com/security/2006-06-24/mybb...verwriting.html http://myimei.com/security/2006-06-22/mybb...in-url-tag.html -Summary- Software: MyBB Sowtwares W...

[KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html

ORIGINAL ADVISORY: http://kapda.ir/page-advisory.html http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.4 Class: Remote Status: Patched Exploit:...

[KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag

ORIGINAL ADVISORY: http://kapda.ir/page-advisory.html http://myimei.com/security/2006-06-22/mybb-114-functionpostphpxss-attack-in-url-tag.html ——————–Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.3 Class: Remote Status: Patched Exploit: Available Discover...

CVE-2006-3243

SQL injection vulnerability in usercp.php in MyBB MyBulletinBoard 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter...

CVE-2006-3243

SQL injection vulnerability in usercp.php in MyBB MyBulletinBoard 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter...

CVE-2006-3243

The CVE-2006-3243 issue affects MyBB (MyBulletinBoard) versions 1.0 through 1.1.3, where a SQL injection vulnerability exists in usercp.php via the showcodebuttons parameter. The underlying root cause is an injectable parameter that allows remote execution of arbitrary SQL commands. Impact detail...

[KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access

ORIGINAL ADVISORY: http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html http://www.kapda.ir/page-advisory.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.3 Class: Remote Status: Patched...

MyBulletinBoard (MyBB) <= 1.1.3 (usercp.php) Create Admin Exploit

No description provided by source. !/usr/bin/perl MyBulletinBoard MyBB = 1.1.3 Create An Admin Exploit www.h4ckerz.com / hackerz.ir / aria-security.net / Myimei.com / ./2006-6-23 Coded By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $una...

MyBulletinBoard (MyBB) 1.1.3 - usercp.php Create Admin

MyBulletinBoard MyBB 1.1.3 - usercp.php Create Admin !/usr/bin/perl MyBulletinBoard MyBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'member.php', Content = "action" = "dologin", "username" = "$uname", "password" = "$passwd", "submit" = "Login", ,;...

MyBB < 1.1.4 SQL Injection

Binary data 3663.prm...

Proof of concept: mybb 1.1.2 remote code execution

514.es brings to you the proof of concept for mybb 1.1.2 http://secunia.com/secuniaresearch/2006-40/advisory/ GET it here: http://www.514.es/download/mybibi.pl Best regards, - J...