CVE-2008-3069

CVE-2008-3069 corresponds to multiple cross-site scripting (XSS) flaws in MyBB prior to version 1.2.13. The affected components are (1) portal.php and (2) inc/functions_post.php, with the root cause described as untrusted input leading to script/HTML injection. This could enable remote attackers ...

CVE-2008-3071

CVE-2008-3071 is a directory traversal vulnerability in MyBB’s code path inc/class_language.php, affecting versions before 1.2.13. The issue is tied to the $language variable, with the connected documents not providing concrete details on impact level, exploit vectors, or a confirmed root cause b...

CVE-2008-3070

Unspecified vulnerability in inc/datahandler/user.php in MyBB before 1.2.13 has unknown impact and attack vectors related to the $user'language' variable, probably related to SQL injection...

CVE-2008-3070

CVE-2008-3070 affects the MyBB code path in inc/datahandler/user.php for versions before 1.2.13 . The vulnerability is described as an “unspecified vulnerability” with unknown impact and attack vectors related to the $user['language'] variable, probably tied to an SQL injection issue. According t...

MyBB 1.2.13版本之前存在多个未明漏洞

BUGTRAQ ID: 30113 CNCAN ID：CNCAN-2008070804 MyBB是一款流行的WEB论坛程序。 MyBB存在多个未明安全问题，目前没有详细漏洞细节提供。 MyBulletinBoard MyBulletinBoard 1.2.12 MyBulletinBoard MyBulletinBoard 1.2.11 MyBulletinBoard MyBulletinBoard 1.2.10 MyBulletinBoard MyBulletinBoard 1.2.5 MyBulletinBoard MyBulletinBoard 1.2.3...

MyBB Plugin Custom Pages 1.0 - SQL Injection

MyBB Plugin Custom Pages 1.0 - SQL Injection MyBulletin Board MyBB Plugin "Custom Pages 1.0" - SQL Injection Vulnerability found by: LidlosesAuge Greetz to: free-hack.com Vulnerability: Document: pages.php GET-Parameter: page Dork: inurl:"pages.php" + intext:"powered by mybb" Example:...

MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== MyBB Plugin Custom Pages 1.0 Remote SQL Injection Vulnerability =============================================================== MyBulletin Board MyBB Plugin "Custom Pages 1.0"...

CVE-2008-0787

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...

Sql injection

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...

CVE-2008-0788

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

CVE-2008-0787

The CVE-2008-0787 entry concerns MyBB

CVE-2008-0788

CVE-2008-0788 describes multiple CSRF vulnerabilities in MyBB 1.2.11 and earlier. The issues allow remote attackers to hijack authentication for actions performed via moderation.php (do_multideletethreads) to delete threads, and via private.php (delete) to remove private messages. Affected produc...

CVE-2008-0788

Multiple cross-site request forgery CSRF vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to 1 hijack the authentication of moderators or administrators for requests that delete threads via a domultideletethreads action to moderation.php and 2 hijack the authentication of arbitra...

CVE-2008-0787

SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL commands via the optionsdisablesmilies parameter to private.php...

MyBulletinBoard (MyBB) 1.2.11 - private.php SQL Injection (1)

MyBulletinBoard MyBB 1.2.11 - private.php SQL Injection 1 !/usr/bin/perl MyBB =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB new or die" - Cannot create new UserAgent\n"; $cookiejar=HTTP::Cookies-new...

mybbprivate-sql.txt

!/usr/bin/perl MyBB =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB new or die" - Cannot create new UserAgent\n"; $cookiejar=HTTP::Cookies-new; $browser-cookiejar$cookiejar; try to log in...

MyBulletinBoard (MyBB) <= 1.2.11 private.php SQL Injection Exploit

No description provided by source. !/usr/bin/perl MyBB =1.2.11 SQL Injection Exploit based on http://www.waraxe.us/advisory-64.html Needs MySQL =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB =1.2.11...

MyBulletinBoard (MyBB) <= 1.2.11 private.php SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================== MyBulletinBoard MyBB =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB new...

MyBulletinBoard (MyBB) 1.2.11 - 'private.php' SQL Injection (1)

!/usr/bin/perl MyBB =4.1 and a valid registration. By F use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; use HTML::Entities; print"\n"; print"\n"; print" MyBB new or die" - Cannot create new UserAgent\n"; $cookiejar=HTTP::Cookies-new; $browser-cookiejar$cookiejar; try to log in...