2725 matches found
CVE-2006-2908
The CVE-2006-2908 issue affects MyBB 1.1.2 (and possibly other versions) where the function domecode in inc/functions_post.php uses the user-supplied username in a preg_replace with the /e modifier, allowing remote attackers to execute arbitrary PHP code. The vulnerability enables code execution ...
CVE-2006-2908
The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...
MyBB < 1.1.3 Multiple Vulnerabilities
Binary data 3649.prm...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...
Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability
====================================================================== Secunia Research 12/06/2006 - MyBB "domecode" PHP Code Execution Vulnerability - ====================================================================== Table of Contents Affected...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...
MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution
!/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graphic confirmation so the exploit writ...
Cross site scripting
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
The CVE-2006-2949 entry concerns a cross-site scripting (XSS) vulnerability in MyBB 1.1.2, occurring in private.php via the do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide additional technical details such as affected ...
CVE-2006-2949
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949: Undefined Security Weakness
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
MyBB 1.1.2 New XSS
// MyBB 1.1.2 New XSS File :- private.php Ver. :- $do = $mybb-input'do'; Line :- 260 Action :- Preview HTTP Proof :-...
Sql injection
SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...
CVE-2006-2589
SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...
CVE-2006-2589
Vulnerability overview (CVE-2006-2589) : The affected software is MyBB (MyBulletinBoard) version 1.1.1, specifically the rss.php component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via the comma parameter. The description notes uncertaint...
CVE-2006-2589: Undefined Security Weakness
SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...
mybb v1.1.1(rss.php) SQL Injection Exploit
---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...
mybb111.txt
---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...
Sql injection
Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...