MyBB Forum Userbar 2.2 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ :...

MyBB Advanced Forum Signatures 2.0.4 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures (afsignatures-2.0.4) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

myBB 1.6.4 Backdoor Exploit

$Id: mybbbackdoor.rb 13850 2011-10-10 15:40:59Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection

MyBB Forum Userbar Plugin Userbar 2.2 - SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Forum Userbar Plugin (Userbar 2.2) - SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Compromised Source Packages Backdoor Vulnerability

MyBB is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb"; if description...

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date :...

MyBB 1.6.4 - Backdoor Access (Metasploit)

$Id: mybbbackdoor.rb 13838 2011-10-09 03:22:07Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

MyBB Forum Userbar Plugin (Userbar v2.2) SQL Injection

Exploit for php platform in category web applications --------------------------------------------------------------------- Exploit Title : MyBB Forum Userbar Plugin Userbar v2.2 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

MyBB Advanced Forum Signatures (afsignatures-2.0.4) SQL Injection

Exploit for php platform in category web applications --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Si...

myBB 1.6.4 Backdoor Exploit

Exploit for php platform in category web applications $Id: mybbbackdoor.rb 13838 2011-10-09 03:22:07Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...

myBB 1.6.4 Backdoor Arbitrary Command Execution

myBB is a popular open source PHP forum software. Version 1.6.4 contained an unauthorized backdoor, distributed as part of the vendor's source package. Module Options msf use exploit/unix/webapp/mybb/backdoor msf undefinedbackdoor show actions ...actions... msf undefinedbackdoor set ACTION msf...

CVE-2011-3759

MyBB aka MyBulletinBoard 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files...

Information disclosure

MyBB aka MyBulletinBoard 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files...

CVE-2011-3759

MyBB aka MyBulletinBoard 1.6 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by inc/3rdparty/diff/Diff/ThreeWay.php and certain other files...

CVE-2011-3759

CVE-2011-3759 affects MyBB (MyBulletinBoard) 1.6. A root-cause is information disclosure via a direct request to certain PHP files (e.g., inc/3rdparty/diff/Diff/ThreeWay.php), which triggers error messages revealing installation path. Impact is sensitive information exposure to remote attackers. ...

Security bypass vulnerability in MyBB

Hello 3APA3A! I want to warn you about security bypass vulnerability in MyBB, which allows to bypass protection against Brute Force and conduct Brute Force attacks. In August in my article Bypassing captchas and blocking at web sites http://websecurity.com.ua/5334/ I wrote about vulnerability in...