MyBB Profile Xbox Live ID SQL Injection Vulnerability

Profile Xbox Live ID allows you to add your xbl gamertag to your profile. Title: MyBB Profile Xbox Live ID SQL Injection Vendor: http://mods.mybb.com/view/profile-xbox-live-id Author: Josephvb10 Exploit Author: n3urot0xin Code: function profilexliupdate$xli global $mybb; if isset$mybb-input'xli'...

MyBB MyTube 1.0 Cross Site Scripting

Exploit Title: MyTube MyBB Plugin Stored XSS Date: 18/12/2012 Exploit Author: Kim Kun Bum Vendor by: Software Link: http://mods.mybb.com/view/mytube Version: 1.0 Category:Web Security Tested on: Windows7 Reason : Lack of input validation in Youtube ID field...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Stored XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Category:Web Security Tested on: Linux P-XSS Installation: 1...

MyBB Profile Skype ID 1.0 Cross Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

MyBB Bank Transactions 2.0 SQL Injection

Exploit Title: MyBB Bank Transactions Plugin SQL Injection Google Dork: inurl:bank.php?transactions= Date: 13.12.2012 Exploit Author: limb0 Vendor Homepage: http://mods.mybb.com/view/transactions Software Link: www.kingofpersia.ir Version: 2.0 Category:Web Security Tested on: Linux...

MyBB Transactions Plugin - 'transaction' SQL Injection

source: https://www.securityfocus.com/bid/57009/info The Transactions Plugin for MyBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access o...

MyBB MyYoutube Cross Site Scripting

Exploit Title: MyYoutube MyBB Stored XSS Date: 17.12.2012 Exploit Author: limb0 Vendor Homepage: http://www.mybb-es.com/ Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Category:Web Security Tested on: Linux +-----------------------------------------------------+ Stored-XSS...

MyBB User Profile Skype ID Plugin 1.0 Stored XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Test...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0...

MyBB Profile Skype ID Cross Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

MyBB User Profile Skype ID Plugin - Post SQL Injection Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

MyBB User Profile Skype ID Plugin 1.0 - Persistent Cross-Site Scripting

Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...

Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link:...

MyBB Xbox Live ID Post SQLi & Persistent XSS Vulnerabilities

Exploit for php platform in category web applications MyBB Xbox Live ID Post SQLi & Persistent XSS This a really easy one to exploit, user input is not sanitized at all and so is injected into the database as the following lines: if isset$mybb-input'xli' $xli-userupdatedata'xli' = $mybb-input'xli...

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites Version: 0.2.2 Tested on: PHP Reason:...

MyBB Social Sites 0.2.2 Cross Site Scripting

Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link: http://mods.mybb.com/view/social-sites Version: 0.2.2 Tested on: PHP Reason:...

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting

Social Sites MyBB Plugin 0.2.2 - Cross-Site Scripting Exploit Title: Social Sites MyBB Plugin 0.2.2 Cross Site Scripting Google Dork: inurl:usercp.php?action=socialsites Date: 13.12.2012 Exploit Author: s3m00t Vendor Homepage: http://mattrogowski.co.uk/mybb/ Software Link:...

MyBB DyMy User Agent Plugin - newreply.php SQL Injection

MyBB DyMy User Agent Plugin - newreply.php SQL Injection Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username...

MyYoutube MyBB Plugin 1.0 - SQL Injection

MyYoutube MyBB Plugin 1.0 - SQL Injection Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link:...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...