CVE-2012-2325

SQL injection vulnerability in the User Inline Moderation feature in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-2324

Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard before 1.6.7 allow remote administrators to execute arbitrary SQL commands via unspecified vectors in the 1 user search or 2 Mail Log in the Admin Control Panel ACP...

CVE-2012-2324

Technical details about CVE-2012-2324 are not publicly provided in the connected documents. Monitor for updates; the sources reproduce the vulnerability description but do not specify affected versions, vectors, exploitation status, or fixes.

CVE-2012-2326

Cross-site scripting XSS vulnerability in the Admin Control Panel ACP in MyBB aka MyBulletinBoard before 1.6.7 allows remote administrators to inject arbitrary web script or HTML via a malformed file name in an orphaned attachment...

CVE-2012-2327

MyBB aka MyBulletinBoard before 1.6.7 allows remote attackers to obtain sensitive information via a malformed forumread cookie, which reveals the installation path in an error message...

CVE-2012-2327

The CVE-2012-2327 issue affects MyBB (MyBulletinBoard) versions prior to 1.6.7. A malformed forumread cookie can cause an error message to reveal the installation path, enabling information disclosure. The vulnerability arises from how the application handles the cookie and error reporting. The d...

CVE-2012-2326

MyBB Admin Control Panel (ACP) contains a Cross-site Scripting (XSS) vulnerability (CVE-2012-2326) affecting

CVE-2012-2325

CVE-2012-2325 is a SQL injection vulnerability in the User Inline Moderation feature of the Admin Control Panel (ACP) in MyBB (MyBulletinBoard) , fixed in version 1.6.7. The flaw allows remote administrators to execute arbitrary SQL commands via unspecified vectors, impacting data confidentiality...

PT-2012-1339 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.6.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the keywords parameter in a 1 do search action to "search.php" or 2 do stuff action to "private.php". The vendor disputes this...

MyBB 1.6.8 'announcements.php'远程SQL注入漏洞

BUGTRAQ ID: 54130 MyBB是一款流行的Web论坛程序。 MyBB 1.6.8没有正确过滤用户提供的输入即用在SQL查询中，导致攻击者利用此漏洞控制应用、访问或修改数据或利用下层数据库中的其他漏洞。 0 MyBB 1.6.8 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...

Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy

a bug in Mybb 1.6.8 'announcements.php' that allows to us to occur a Sql Injection on a Remote machin. Exploit Title : Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.mybb.com/ Security Risk...

MyBB 'member.php' SQLi Vulnerability

MyBB is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; ifdescription...

MyBB 1.6.8 - 'member.php' SQL Injection

source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

MyBB 1.6.8 - member.php SQL Injection

MyBB 1.6.8 - member.php SQL Injection source: https://www.securityfocus.com/bid/53814/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromi...

MyBB 1.6.8 With AdvancedProfile 3.1 SQL Injection

-------------------- IN The NAme OF God -------------------- -====MyBB 1.6.8 Sql Injection Vulnerability====- Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====-...

MyBB version 1.6.8 suffers from a remote SQL injection vulnerability

No description provided by source. Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====- inurl:member.php?action=profile&uid= inurl:action=profile&uid=27 -====Exploit====-...

MyBB 1.6.7之前版本多个安全漏洞

BUGTRAQ ID: 53417 MyBB是一款流行的Web论坛程序。 MyBB 1.6.7之前版本在实现上存在多个安全漏洞，成功利用后可允许攻击者执行任意脚本代码、窃取Cookie身份验证凭证、控制应用、访问或修改数据或利用底层数据库中的其他漏洞并访问敏感数据。 0 MyBB 1.6.x MyBB 1.4.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...

MyBB 1.6.6 index.php SQL注入和跨站脚本执行漏洞

MyBB 'moderation.php' SQL注入漏洞+多个远程PHP代码执行漏洞 MyBB是一款基于PHP的WEB应用程序。 MyBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意代码. 问题是由于'forumdisplay.php'和'search.php'脚本对用户提交的'fid'参数处理缺少充分过滤，提交恶意数据，在获得"sid"的情况下，可导致任意代码执行。 注入:...

MyBB 1.6.6 'index.php' SQL注入和跨站脚本执行漏洞

BUGTRAQ ID: 52743 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在SQL注入漏洞和跨站脚本执行漏洞，利用这些漏洞可允许攻击者执行任意脚本代码、窃取cookie验证凭证、控制应用、访问或修改数据 0 MyBB 1.6.6 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/ SQL-injection: POST /mybb/admin/index.php?module=user-users&action=search HTTP/1.1...

MyBB 1.6.6 Cross Site Scripting / SQL Injection

Exploit Title: Multiple vulnerabilities in mybb 1.6.6 Google Dork: intext:"Powered By MyBB" Date: 26th March 2012 Author: Aditya Modha Software Link: http://www.mybb.com/downloads Version: 1.6.6 Tested on: ubuntu CVE : Just applied / Y \ / Y /| Y \ /| \ / Y \ | / | | | | | |/|| / | |\ || | | /...