MyBB 1.1.1 Local SQL Injections

MyBB Local SQL Injections .. This Local Injections Only For Admin 1 code adminfunctions.php , line 730 $db-query"INSERT INTO ".TABLEPREFIX."adminlog uid,dateline,scriptname,action,querystring,ipaddress VALUES...

Sql injection

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

CVE-2006-1974

CVE-2006-1974: SQL injection in MyBB (MyBulletinBoard) index.php via the referrer parameter, affecting versions before 1.04. Exploitation could allow remote SQL commands with partial confidentiality and integrity impact. Fix: upgrade to 1.04 or later; apply vendor patches as available. If details...

CVE-2006-1974: Undefined Security Weakness

SQL injection vulnerability in index.php in MyBB MyBulletinBoard before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

CVE-2006-1912

MyBB MyBulletinBoard 1.1.0 does not set the constant KILLGLOBAL variable in 1 global.php and 2 inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting XSS or SQL injectio...

CVE-2006-1911

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

Cross site scripting

MyBB MyBulletinBoard 1.1.0 does not set the constant KILLGLOBAL variable in 1 global.php and 2 inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting XSS or SQL injectio...

CVE-2006-1912

The CVE-2006-1912 issue affects MyBB 1.1.0 where the constant KILL_GLOBAL is not set in global.php and inc/init.php. This allows a remote attacker to initialize arbitrary variables processed by an @extract, which could be leveraged to perform cross-site scripting (XSS) or SQL injection. Multiple ...

CVE-2006-1911

The CVE-2006-1911 entry concerns MyBB (MyBulletinBoard) version 1.1 with a Cross-site Scripting (XSS) vulnerability. The root cause is an issue in how attachment content disposition is handled in HTML attachments, allowing remote attackers to inject arbitrary web script or HTML. Practical impact:...

CVE-2006-1912

MyBB MyBulletinBoard 1.1.0 does not set the constant KILLGLOBAL variable in 1 global.php and 2 inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting XSS or SQL injectio...

CVE-2006-1912: Undefined Security Weakness

MyBB MyBulletinBoard 1.1.0 does not set the constant KILLGLOBAL variable in 1 global.php and 2 inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting XSS or SQL injectio...

CVE-2006-1911: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MyBB MyBulletinBoard 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment...

MyBB 1.1 - Global Variable Overwrite

MyBB 1.1 - Global Variable Overwrite source: https://www.securityfocus.com/bid/17564/info MyBB is prone to a vulnerability that permits an attacker to overwrite global variables. This issue is due to a design flaw in handling HTTP GET and POST variables. An attacker can exploit this issue to...

MyBB 1.1 - Global Variable Overwrite

source: https://www.securityfocus.com/bid/17564/info MyBB is prone to a vulnerability that permits an attacker to overwrite global variables. This issue is due to a design flaw in handling HTTP GET and POST variables. An attacker can exploit this issue to overwrite the global variables with...

MyBB global.php 'KILL_GLOBAL' Overwrite SQL Injection

The version of MyBB installed on the remote host is affected by a global variable overwrite vulnerability due to a failure to properly initialize global variables in the global.php script. A remote, unauthenticated attacker can exploit this issue to overwrite global variables to launch a SQL...

[KAPDA]MyBB1.1.0~global.php~ParameterExtracting

ORIGINAL ADVISORY: http://myimei.com/security/2006-04-14/mybb110globalphpparameterextracting.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by: imei...

MyBB 1.10 New CrossSiteScripting ' member.php '

//-- MyBB 1.10 New CrossSiteScripting ' member.php ' --// Webattack :- /mybb/member.php?action=dologin&username=usrname&password=pass&url="scriptalert1;/script //-- FixIT --// Open member.php GoTo Line :- 1030 .. if$mybb-input'url' redirect$mybb-input'url', $lang-redirectloggedin; Replace It With...