2280 matches found
MyBB MyTabs Plugin - 'tab' SQL Injection
source: https://www.securityfocus.com/bid/48952/info The MyTabs plugin for MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the...
MyBB 0day \ MyTabs (plugin) Blind SQL injection vulnerability
Exploit for php platform in category web applications ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL...
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec
AntiSecShell v.0.5 Shell Released by underground hackers of Antisec AntiSecShell ASS was built by the underground hacking community and groups like h0no, ac1db1tch3z and others who wish to remainanonymous, have helped altogether to create this new shell. It hasmany functions but most important of...
XSS, Redirector и IAA уязвимости в MyBB
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, URL Redirector Abuse и Insufficient Anti-automation уязвимостях в MyBB. Для XSS и URL Redirector Abuse используется рабочий аккаунт на уязвимом сайте. О подобных атаках я писал в статье Атаки на незащищённые логин формы...
Многочисленные уязвимости в MyBB
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage, Abuse of Functionality, Insufficient Anti-automation и Brute Force уязвимостях в MyBB. Information Leakage WASC-13: Логины есть именами пользователей на форуме и соответственно на страницах форума можно выявить логины. Abuse o...
MyBB < 1.4.15 / 1.6 < 1.6.2 Multiple Vulnerabilities
Binary data 5879.prm...
Уязвимости в MyBB
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в MyBB. Уязвимости имеют место в скриптах search.php и private.php. XSS WASC-08: http://websecurity.com.ua/uploads/2011/MyBB20XSS.html...
MyBB xmlhttp.php 'value' Parameter XSS
The version of MyBB installed on the remote host is affected by a cross-site scripting vulnerability due to improper validation of user-supplied input to 'value' parameter of the 'xmlhttp.php' script. A remote attacker can exploit this by enticing a user to click a specially crafted URL. Note tha...
MyBB 1.4/1.6 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47131/info MyBB is prone to multiple security vulnerabilities. These vulnerabilities include a username-enumeration weakness, an XML-injection vulnerability, and a cross-site scripting vulnerability. Exploiting these issues may allow attackers to discern...
AoF, IAA, XML Injection и XSS уязвимости в MyBB
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Abuse of Functionality, Insufficient Anti-automation, XML Injection and Cross-Site Scripting уязвимостях в MyBB. Abuse of Functionality WASC-42: Через данный функционал можно выявлять логины в системе...
MyBB 1.41.6 - Multiple Vulnerabilities
MyBB 1.41.6 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/47131/info MyBB is prone to multiple security vulnerabilities. These vulnerabilities include a username-enumeration weakness, an XML-injection vulnerability, and a cross-site scripting vulnerability. Exploiting these...
MyBB 1.6.1 Login Enumeration / Cross Site Scripting
Hello list! I want to warn you about Abuse of Functionality, Insufficient Anti-automation, XML Injection and Cross-Site Scripting vulnerabilities in MyBB. ------------------------- Affected products: ------------------------- Vulnerable are MyBB 1.6.1 and previous versions. In versions MyBB 1.6.2...
MyBB 1.6.2 Stored XSS Vulnerability
Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...
MyBB 1.6.2 Cross Site Scripting
MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XSS code as the title any user with any level of...
MyBB < 1.6.1 Multiple XSS Vulnerabilities
MyBB is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mybb:mybb";...
CVE-2010-4627
Cross-site request forgery CSRF vulnerability in usercp2.php in MyBB aka MyBulletinBoard before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2010-4628
member.php in MyBB aka MyBulletinBoard before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service resource consumption by making requests to member.php that trigger scans of the entire users table...
CVE-2010-4625
MyBB aka MyBulletinBoard before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page...
CVE-2010-4522
Multiple cross-site scripting XSS vulnerabilities in MyBB aka MyBulletinBoard 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 editpost.php, 2 member.php, and 3 newreply.php...