2266 matches found
MyBulletinBoard (MyBB) < 1.1.3 - Remote Code Execution
!/usr/bin/perl Tue Jun 13 12:37:12 CEST 2006 [email protected] Exploit HOWTO - read this before flood my Inbox you bitch! - First you need to create the special user to do this use: ./mybibi.pl --host=http://www.example.com --dir=/mybb -1 this step needs a graphic confirmation so the exploit writ...
MyBB < 1.1.3 Multiple Vulnerabilities
Binary data 3649.prm...
Cross site scripting
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
Cross-site scripting XSS vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the do parameter...
CVE-2006-2949
The CVE-2006-2949 entry concerns a cross-site scripting (XSS) vulnerability in MyBB 1.1.2, occurring in private.php via the do parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The connected documents do not provide additional technical details such as affected ...
MyBB 1.1.2 New XSS
// MyBB 1.1.2 New XSS File :- private.php Ver. :- $do = $mybb-input'do'; Line :- 260 Action :- Preview HTTP Proof :-...
Sql injection
SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...
CVE-2006-2589
SQL injection vulnerability in rss.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten...
CVE-2006-2589
Vulnerability overview (CVE-2006-2589) : The affected software is MyBB (MyBulletinBoard) version 1.1.1, specifically the rss.php component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via the comma parameter. The description notes uncertaint...
mybb v1.1.1(rss.php) SQL Injection Exploit
---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...
mybb111.txt
---------------------------------- Foud By: Breeeeh & CrAzY CrAcKeR Site: www.alshmokh.com Email:[email protected] ---------------------------------- $query = $db-query"SELECT FROM ".TABLEPREFIX."forums f WHERE 1=1 $forumlist"; $comma = " - "; while$forum = $db-fetcharray$query $title .=...
Sql injection
Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...
CVE-2006-2333
Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...
CVE-2006-2336
SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...
Sql injection
SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...
CVE-2006-2336
SQL injection vulnerability in showthread.php in MyBB aka MyBulletinBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter...
CVE-2006-2333
Multiple SQL injection vulnerabilities in MyBB aka MyBulletinBoard 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in 1 usercp.php and 2 member.php...
CVE-2006-2333
CVE-2006-2333 concerns MyBB 1.1.1 where multiple SQL injection flaws allow remote attackers to run arbitrary SQL through the email address during registration for a mail-verified forum, due to improper handling in (1) usercp.php and (2) member.php. The vulnerability permits injected SQL commands ...
CVE-2006-2336
CVE-2006-2336 describes an SQL injection in MyBB (MyBulletinBoard) 1.1.1 via the comma parameter in showthread.php, allowing remote command execution. The affected component is the showthread.php handler; the underlying issue is improper input handling that enables arbitrary SQL execution. Exploi...