2260 matches found
MyBB 1.0.3 - 'private.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/16678/info MyBB is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain administrati...
MyBulletinBoard (MyBB) 1.03 - Multiple SQL Injections
!/bin/env perl //------------------------------------------------------------- // MyBB Forum SQL Injection Exploit .. By HACKERS PAL // Greets For Devil-00 - Abducter - Almaster - GaCkeR // Special Greets For SG SecurityGurus Team And Members // http://WwW.SoQoR.NeT...
MyBB 1.0.3 - private.php Multiple SQL Injections
MyBB 1.0.3 - private.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16678/info MyBB is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation can allow an attack...
MyBulletinBoard (MyBB) <= 1.03 Multiple SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= MyBulletinBoard MyBB = 1.03 Multiple SQL Injection Exploit ============================================================= !/bin/env perl...
MyBB-1.03.txt
Multible Injections in MyBB 1.03 All injections and vulnerabilities discovered by : HACKERS PAL two days ago i thought to download the new Mybb forum new version files .. and there were the desaster there is many xss and sql injections in the new protected version ... and i made a exploit which g...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
Sql injection
SQL injection vulnerability in moderation.php in MyBB aka MyBulletinBoard 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter...
CVE-2006-0639
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
CVE-2006-0638
SQL injection vulnerability in moderation.php in MyBB aka MyBulletinBoard 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter...
CVE-2006-0638
SQL injection vulnerability in moderation.php in MyBB aka MyBulletinBoard 1.0.3 allows remote authenticated users, with certain privileges for moderating and merging posts, to execute arbitrary SQL commands via the posts parameter...
CVE-2006-0639
Cross-site scripting XSS vulnerability in search.php in MyBB aka MyBulletinBoard 1.0.2 allows remote attackers with knowledge of the table prefix to inject arbitrary web script or HTML via a URL encoded value of the keywords parameter, as demonstrated by %3Cscript%3E...
CVE-2006-0638
SQL injection in MyBB 1.0.3 moderation.php allows remote authenticated users with moderating/merging privileges to inject arbitrary SQL commands via the posts parameter. Affected software: MyBB (MyBulletinBoard) 1.0.3; vulnerability stems from the moderation component as described in CVE-2006-063...
CVE-2006-0639
CVE-2006-0639 : A cross-site scripting (XSS) vulnerability in MyBB 1.0.2 affects search.php where the keywords parameter is not properly sanitized, allowing a remote attacker with knowledge of the table prefix to inject arbitrary script/HTML via a URL-encoded payload (e.g., %3Cscript%3E). Affecte...
[myimei]MyBB 1.0.2 XSS attack in search.php
original advisory: http://myimei.com/security/2006-01-14-mybb-102searchphpxss-attackandmore/index.html --------------- —————-Summary—————- Software: MyBB Sowtware’s Web Site: http://mybboard.com Versions: 1.0.2 Class: Remote Status: patched in 1.0.3 Exploit: Available Solution: Available Discover...
[myimei]MyBB1.0.3~moderation.php~SqlInject while merging posts
ORIGINAL ADVISORY : http://myimei.com/security/2006-02-07/mybb103moderationphpsqlinject-while-merging-posts.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.0.3 Class: Remote Status: Unpatched Exploit: Available Discovered by: imei addmimistrator...
MyBB 1.0.3 - 'moderation.php' SQL Injection
source: https://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain administrative access to a site, modify data...
MyBB 1.0.3 - moderation.php SQL Injection
MyBB 1.0.3 - moderation.php SQL Injection source: https://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain...
MyBB Detection
The remote host is running MyBB formerly known as MyBulletinBoard, a web-based bulletin board system written in PHP utilizing MySQL for its back-end storage. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid20841; scriptversion"1.21";...