MyBB DyMy User Agent Plugin (newreply.php) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We...

MyBB DyMy User Agent SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...

MyBB Facebook Profile 2.4 Cross Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyYoutube MyBB Plugin 1.0 - SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...

MyBB MyYoutube 1.0 SQL Injection

Exploit Title: MyYoutube MyBB plugin SQL UPDATE injection. Google Dork: inurl:member.php intext:"Youtube Video" intitle:"Profile of" Date: 12.10.2012 Exploit Author: Zixem Vendor Homepage: http://www.mybb-es.com Software Link: http://mods.mybb.com/view/myyoutube Version: 1.0 Tested on: Linux...

MyBB DyMy User Agent Plugin - 'newreply.php' SQL Injection

Exploit title : MyBB DyMy User Agent Plugin SQL injection vulnerability. Author: JoinSe7en Date : 13 Dec 2012 Tested on : Linux Category : Web Applications Software Link : http://mods.mybb.com/view/dymy-user-agent PoC receive admin username We fire up HTTP Live Headers or a similar tool, post...

MyBB AJAX Chat - Persistent Cross-Site Scripting

MyBB AJAX Chat - Persistent Cross-Site Scripting Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability li...

MyBB Plugin 2.4 Facebook Profile Persistant XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Teste...

MyBB ChangUonDyu Extra File Chatbox Persistent XSS Vulnerability

Popular inferno-like chatbox built for MyBB! ChangUonDyu Extra File Chatbox Persistent XSS Location: Chatbox Notice Vendor: http://community.mybb.com/thread-63559.html PoC: function buildnotice global $fcbfile,$smilies; $noticef = filegetcontents$fcbfile'notice'; $handle =...

MyBB AJAX Chat - Persistent Cross-Site Scripting

Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Version: 1 Tested on: Windows The Persistent XSS vulnerability lies within the chatframe.php page. Persistent /...

Facebook Profile MyBB Plugin 2.4 - Persistent Cross-Site Scripting

Exploit Title: MyBB Facebook Profile Plugin Persistant XSS Date: 12/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.collectiontricks.it/ Software Link: http://mods.mybb.com/view/facebook-profile-link-on-postbit-2-2 Version: 2.4 Tested on: Linux P-XSS Installation: 1. Upload all folder t...

MyBB TipsOfTheDay Cross Site Scripting / SQL Injection

Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...

MyBB Profile Blogs Plugin 1.2 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link:...

MyBB AJAX Chat Persistent XSS Vulnerability

Exploit for php platform in category web applications Title: MyBB AJAX Chat Persistent XSS Vulnerability Date: 12/12/2012 Exploit Author: Mr. P-teo Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/ajax-chat Category: Webapps Version: 1 Tested on: Windows The Persiste...

MyBB Bank-v3 Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'";...

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities

Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on: Windows The tipsoftheday.php file is vulnerable to...

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities

TipsOfTheDay MyBB Plugin - Multiple Vulnerabilities Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested on:...

MyBB TipsOfTheDay Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: TipsOfTheDay mybb plugin stored XSS and SQL injection vulnerabilitys. Date: 12.12.2012 Exploit Author: VipVince Vendor Homepage: http://www.mybb.com/ Software Link: http://mods.mybb.com/view/tips-of-the-day Version: 1.0 Tested o...

MyBB Profile Blogs Plugin 1.2 - Multiple Vulnerabilities

Exploit Title: MyBB Profile Blog plugin multiple vulnerabilities. Google Dork: inurl:member.php intext:"Profile Blogs" for MyBB Date: 12.9.2012 Exploit Author: Zixem Vendor Homepage: http://fklar.pl/ Software Link: http://mods.mybb.com/view/profile-blogs Version: 1.2+ Tested on: Linux. MyBB Profi...

MyBB Bank- 3 Plugin - SQL Injection

Exploit Title: Bank v3 MyBB plugin SQLi 0day Exploit Author: RedHat NullSec Software Link: http://mods.mybb.com/download/bank-v3 Tested on: Windows & Linux. Vulnerable code : query"SELECT FROM ".TABLEPREFIX."users WHERE username='$user'"; $fetch=$db-fetcharray$queryr; ? The variable...