2266 matches found
MyBulletinBoard (MyBB) <= 1.1.5 (CLIENT-IP) SQL Injection Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB"...
MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
!/usr/bin/php -q -d shortopentag=on ? echo "MyBulletinBoard MyBB = 1.1.5 'CLIENT-IP' SQL injection / create new admin exploit\n"; echo "by rgod [email protected]\n"; echo "site: http://retrogod.altervista.org\n"; echo "dork, version specific: "Powered By MyBB" "2006 MyBB Group"\n\n"; / works...
CVE-2006-3420
Cross-site request forgery CSRF vulnerability in editpost.php in MyBulletinBoard MyBB before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action. NOTE: the...
CVE-2006-3420
CVE-2006-3420 affects MyBulletinBoard (MyBB) prior to version 1.1.5. The issue is a cross-site request forgery (CSRF) in editpost.php that lets an attacker perform actions as a logged-in user, including deleting arbitrary forum posts, by using a bbcode IMG tag with a modified delete parameter in ...
kapda-50.txt
KAPDA::50MyBB 1.1.4 Multiple Vuln SQLInjection & XSS ------- KAPDA New Advisory . http://www.kapda.ir/advisory-349.html ORIGINAL ADVISORY: http://myimei.com/security/2006-06-24/mybb...verwriting.html http://myimei.com/security/2006-06-22/mybb...in-url-tag.html -Summary- Software: MyBB Sowtwares W...
[KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html
ORIGINAL ADVISORY: http://kapda.ir/page-advisory.html http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.4 Class: Remote Status: Patched Exploit:...
[KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag
ORIGINAL ADVISORY: http://kapda.ir/page-advisory.html http://myimei.com/security/2006-06-22/mybb-114-functionpostphpxss-attack-in-url-tag.html ——————–Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.3 Class: Remote Status: Patched Exploit: Available Discover...
CVE-2006-3243
SQL injection vulnerability in usercp.php in MyBB MyBulletinBoard 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter...
CVE-2006-3243
The CVE-2006-3243 issue affects MyBB (MyBulletinBoard) versions 1.0 through 1.1.3, where a SQL injection vulnerability exists in usercp.php via the showcodebuttons parameter. The underlying root cause is an injectable parameter that allows remote execution of arbitrary SQL commands. Impact detail...
CVE-2006-3243
SQL injection vulnerability in usercp.php in MyBB MyBulletinBoard 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter...
MyBulletinBoard (MyBB) <= 1.1.3 (usercp.php) Create Admin Exploit
No description provided by source. !/usr/bin/perl MyBulletinBoard MyBB = 1.1.3 Create An Admin Exploit www.h4ckerz.com / hackerz.ir / aria-security.net / Myimei.com / ./2006-6-23 Coded By Hessam-x / Hessamx-at-Hessamx.net use IO::Socket; use LWP::UserAgent; use HTTP::Cookies; $host = $ARGV0; $una...
MyBulletinBoard (MyBB) 1.1.3 - usercp.php Create Admin
MyBulletinBoard MyBB 1.1.3 - usercp.php Create Admin !/usr/bin/perl MyBulletinBoard MyBB new or die; $cookiejar = HTTP::Cookies-new; $xpl-cookiejar $cookiejar ; $res = $xpl-post$url.'member.php', Content = "action" = "dologin", "username" = "$uname", "password" = "$passwd", "submit" = "Login", ,;...
[KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access
ORIGINAL ADVISORY: http://myimei.com/security/2006-06-21/mybb113option-update-for-code-buttonssql-injection-admin-access.html http://www.kapda.ir/page-advisory.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.3 Class: Remote Status: Patched...
MyBB < 1.1.4 SQL Injection
Binary data 3663.prm...
Proof of concept: mybb 1.1.2 remote code execution
514.es brings to you the proof of concept for mybb 1.1.2 http://secunia.com/secuniaresearch/2006-40/advisory/ GET it here: http://www.514.es/download/mybibi.pl Best regards, - J...
CVE-2006-2908
The CVE-2006-2908 issue affects MyBB 1.1.2 (and possibly other versions) where the function domecode in inc/functions_post.php uses the user-supplied username in a preg_replace with the /e modifier, allowing remote attackers to execute arbitrary PHP code. The vulnerability enables code execution ...
CVE-2006-2908
The domecode function in inc/functionspost.php in MyBulletinBoard MyBB 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a pregreplace function call with a /e executable modifier...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
Exploit for unknown platform in category web applications ============================================================ MyBulletinBoard MyBB 1.1.3 Remote Code Execution Exploit ============================================================ !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 email protected...
MyBulletinBoard (MyBB) < 1.1.3 Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graph...
Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability
====================================================================== Secunia Research 12/06/2006 - MyBB "domecode" PHP Code Execution Vulnerability - ====================================================================== Table of Contents Affected...