MyBB 1.6.6之前版本多个安全漏洞

BUGTRAQ ID: 51962 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在多个安全漏洞，攻击者可利用这些漏洞执行脚本代码、窃取Cookie身份验证凭证、泄露或修改敏感信息或执行非法操作。 0 MyBB 1.x 厂商补丁： MyBB ---- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mybboard.com/...

MyBB 1.6.4 RCE

MyBB 1.6.4 unauthorized backdoored command exec Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

MyBB 1.6.5 suffers from a cross site scripting vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import requests ''' 原始利用链接： /tags.php?tag="prompt/SEBUG@TEST/ ''' class TestPOCPOCBase: vulID = '26119' ssvid version =...

MyBB 'tags.php' XSS Vulnerability

MyBB is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...

MyBB 1.6.5 Cross Site Scripting

Exploit Title: 0-day MyBB 1.6.5 XSS Vulnerability Date: 25/12/2011 - 18:30 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: [email protected] Software Website: http://www.mybb.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: inurl:"tags.php" intext:"MyBB 1.6.5" Vulnerabl...

CVE-2011-4569

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...

Sql injection

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...

CVE-2011-4569

SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter...

CVE-2011-4569

CVE-2011-4569 describes an SQL injection in MyBB’s Userbar Plugin (userbarsettings.php) for MyBB, via the image2 parameter in version 2.2. The vulnerability is exploitable remotely with network access and low complexity, allowing arbitrary SQL commands and partial impacts on confidentiality, inte...

MyBB 1.x 多个安全漏洞

BUGTRAQ ID: 50816 MyBB是一款流行的Web论坛程序。 MyBB在实现上存在跨站脚本执行、跨站请求伪造和其他多个安全漏洞，攻击者可利用这些漏洞在受影响站点用户浏览器中执行任意脚本，窃取cookie验证凭证，泄露或修改敏感信息或这些非法操作。 1）好友列表中的未解析头像中存在错误； 2）通过用户名传递的输入在返回给用户之前没有正确过滤，导致在受影响站点的用户浏览器中执行任意HTML和脚本代码； 3）应用允许用户通过HTTP请求执行某些操作，但不验证这些请求。可在用户浏览特制的网页时更改语言设置。 MyBB 1.x 厂商补丁： MyBB ----...

MyBB MyStatus Plugin process-mystatus.php 'statid' Parameter SQLi Vulnerability

MyBB with MyStatus Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyBB Advanced Forum Signatures (afsignatures) Plugin 'signature.php' SQLi Vulnerability

MyBB with Advanced Forum Signatures afsignatures Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MyBB Userbar Plugin 'userbarsettings.php' SQLi Vulnerability

MyBB with Userbar Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyBB 1.6.4 Backdoor PHP Remote Code Execution

A version of MyBB 1.6.4 with a backdoor was detected on the remote host. The MyBB source code repository was compromised, and backdoor code was added to allow arbitrary PHP execution. The backdoor is present in MyBB 1.6.4 downloaded on or before October 6, 2011. A remote, unauthenticated attacker...

MyBB MyStatus 3.1 SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus插件"statid" SQL注入漏洞

MyBB是一款流行的Web论坛程序。 MyStatus插件中的"statid"参数传递到process-mystatus.php的输入没有正确过滤就用在SQL查询中，在实现上存在SQL注入漏洞，恶意用户可利用此漏洞执行SQL注入攻击。 MyBB MyStatus Plugin for MyBB 3.x 厂商补丁： MyBB ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.mybboard.com/...

MyBB MyStatus 3.1 - SQL Injection

MyBB MyStatus 3.1 - SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 - SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB MyStatus 3.1 SQL Injection Vulnerability

Exploit for php platform in category web applications --------------------------------------------------------------------- Exploit Title : MyBB MyStatus 3.1 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...