Sql injection

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2336

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2333

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2333

CVE-2006-2333 concerns MyBB 1.1.1 where multiple SQL injection flaws allow remote attackers to run arbitrary SQL through the email address during registration for a mail-verified forum, due to improper handling in (1) usercp.php and (2) member.php. The vulnerability permits injected SQL commands ...

CVE-2006-2336

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2333: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

CVE-2006-2336

CVE-2006-2336 describes an SQL injection in MyBB (MyBulletinBoard) 1.1.1 via the comma parameter in showthread.php, allowing remote command execution. The affected component is the showthread.php handler; the underlying issue is improper input handling that enables arbitrary SQL execution. Exploi...

CVE-2006-2336: Undefined Security Weakness

SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...

CVE-2006-2333

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...

mybb v1.1.1(showthread.php) SQL Injection Exploit

---------------------------------- foud by: Breeeeh Site: http://www.alshmokh.com Email: [email protected] ---------------------------------- $query = $db-query"SELECT pid FROM ".TABLEPREFIX."posts WHERE tid='$tid' $visible ORDER BY dateline LIMIT $start, $perpage"; while$getid =...

MyBB <= 1.1.1 showthread.php comma Parameter SQL Injection

Binary data 3561.prm...

MyBB 1.1.1 - showthread.php SQL Injection

MyBB 1.1.1 - showthread.php SQL Injection source: https://www.securityfocus.com/bid/17904/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful attack could all...

[KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-activation-sql-injection-attack.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.1 Class: Remote Status: Unpatched Exploit: Available Solution: Available...

MyBB 1.1.1 - 'showthread.php' SQL Injection

source: https://www.securityfocus.com/bid/17904/info MyBB is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

Sql injection

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...

CVE-2006-2103

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...

CVE-2006-2103

The CVE-2006-2103 entry concerns MyBB (MyBulletinBoard) version 1.1.1, where an SQL injection vulnerability allows remote authenticated administrators to execute arbitrary SQL commands. The flaw stems from improper handling of user-supplied input in adminlogs.php (query string via $querystring) a...

CVE-2006-2103

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...

MyBB1.1.1.txt

MyBB Local SQL Injections .. This Local Injections Only For Admin 1 code adminfunctions.php , line 730 $db-query"INSERT INTO ".TABLEPREFIX."adminlog uid,dateline,scriptname,action,querystring,ipaddress VALUES...

CVE-2006-2103: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MyBB MyBulletinBoard 1.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the 1 query string $querystring variable in a admin/adminlogs.php, which is not properly handled by adminfunctions.php; or 2 setid, 3 expand, 4 title, or 5 si...