MyBB MyTabs Plugin 'tab' Parameter SQLi Vulnerability

MyBB with MyTabs Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

MyBB MyTabs SQL Injection

===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerability. Author: AutoRUN & dR.sqL Home :...

MyBB MyTabs Plugin - SQL Injection

===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerability. Author: AutoRUN & dR.sqL Home :...

MyBB MyTabs Plugin - tab SQL Injection

MyBB MyTabs Plugin - tab SQL Injection source: https://www.securityfocus.com/bid/48952/info The MyTabs plugin for MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow ...

MyBB MyTabs (plugin) 0day SQL injection vulnerability

No description provided by source. view source print? ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL...

MyBB MyTabs Plugin - 'tab' SQL Injection

source: https://www.securityfocus.com/bid/48952/info The MyTabs plugin for MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...

MyBB 0day \ MyTabs (plugin) Blind SQL injection vulnerability

Exploit for php platform in category web applications ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL...

AntiSecShell v.0.5 Shell Released by underground hackers of Antisec

AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...

XSS, Redirector и IAA уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, URL Redirector Abuse и Insufficient Anti-automation уязвимостях в MyBB. Для XSS и URL Redirector Abuse используется рабочий аккаунт на уязвимом сайте. О подобных атаках я писал в статье Атаки на незащищённые логин формы...

Многочисленные уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage, Abuse of Functionality, Insufficient Anti-automation и Brute Force уязвимостях в MyBB. Information Leakage WASC-13: Логины есть именами пользователей на форуме и соответственно на страницах форума можно выявить логины. Abuse o...

Уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в MyBB. Уязвимости имеют место в скриптах search.php и private.php. XSS WASC-08: http://websecurity.com.ua/uploads/2011/MyBB20XSS.html...

MyBB < 1.4.15 / 1.6 < 1.6.2 Multiple Vulnerabilities

Binary data 5879.prm...

MyBB 1.4/1.6 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/47131/info MyBB is prone to multiple security vulnerabilities. These vulnerabilities include a username-enumeration weakness, an XML-injection vulnerability, and a cross-site scripting vulnerability. Exploiting these issues may allow attackers to discern...

MyBB xmlhttp.php 'value' Parameter XSS

The version of MyBB installed on the remote host is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to 'value' parameter of the 'xmlhttp.php' script. A remote attacker can exploit this by enticing a user to click a specially crafted URL. Note tha...

MyBB 1.41.6 - Multiple Vulnerabilities

MyBB 1.41.6 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/47131/info MyBB is prone to multiple security vulnerabilities. These vulnerabilities include a username-enumeration weakness, an XML-injection vulnerability, and a cross-site scripting vulnerability. Exploiting these...

AoF, IAA, XML Injection и XSS уязвимости в MyBB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality, Insufficient Anti-automation, XML Injection and Cross-Site Scripting уязвимостях в MyBB. Abuse of Functionality WASC-42: Через данный функционал можно выявлять логины в системе...

MyBB 1.6.1 Login Enumeration / Cross Site Scripting

Hello list! I want to warn you about Abuse of Functionality, Insufficient Anti-automation, XML Injection and Cross-Site Scripting vulnerabilities in MyBB. ------------------------- Affected products: ------------------------- Vulnerable are MyBB 1.6.1 and previous versions. In versions MyBB 1.6.2...

MyBB 1.6.2 Stored XSS Vulnerability

Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...

MyBB 1.6.2 Cross Site Scripting

MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XSS code as the title any user with any level of...