2260 matches found
CVE-2006-0523
The vulnerability CVE-2006-0523 is an SQL injection flaw in MyBB’s global.php (templatelist variable) affecting versions prior to 1.03. The issue allows remote attackers to modify SQL queries, potentially compromising data. The core detail is that templatelist input is used in SQL statements with...
MyBB index.php 'referrer' Parameter SQLi
The version of MyBB installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input to the 'referrer' parameter before using it in the globals.php script. A remote attacker can exploit this issue to manipulate SQL queries, resulting in...
Cross site scripting
Cross-site scripting XSS vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB aka MyBulletinBoard 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header $url variable...
CVE-2006-0494
Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul %00 character in the plugin parameter...
Directory traversal
Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul %00 character in the plugin parameter...
CVE-2006-0495
Cross-site scripting XSS vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB aka MyBulletinBoard 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header $url variable...
CVE-2006-0495
The CVE-2006-0495 entry concerns MyBB (MyBulletinBoard) 1.02. A Cross‑Site Scripting (XSS) flaw exists in the Add Thread to Favorites feature implemented in usercp2.php, exploitable via an HTTP Referer header (the $url variable). This allows remote attackers to inject arbitrary web script or HTML...
CVE-2006-0495
Cross-site scripting XSS vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB aka MyBulletinBoard 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header $url variable...
CVE-2006-0494
CVE-2006-0494 : The connected NVD entry describes a directory traversal vulnerability in MyBB (MyBulletinBoard) 1.02. Local users with MyBB administrative privileges can include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin pa...
CVE-2006-0494
Directory traversal vulnerability in MyBB aka MyBulletinBoard 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul %00 character in the plugin parameter...
CVE-2006-0470
CVE-2006-0470 describes an XSS vulnerability in MyBB 1.02’s search.php where the sortby and sortordr parameters are not properly handled during redirection. An attacker could inject arbitrary script/HTML by manipulating these parameters, leading to possible remote script execution in the context ...
MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection
source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to bypass authentication and gain...
MyBB 1.01.1 - index.php Referrer Cookie SQL Injection
MyBB 1.01.1 - index.php Referrer Cookie SQL Injection source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can...
MyBB 1.2 Local File Incusion
Invalid characters removed from From: [email protected], |@securityfocus.com, D3vil-0x1 MyBB Bug Local File Inclusion MyBB 1.2 - Admin Can Include Local File : File :- admin/plugins.php Line :- 51 // if$mybb-input'action' == "activate" $codename = $mybb-input'plugin'; Input From POST $file =...
MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS )
Invalid characters removed from From: [email protected], |@securityfocus.com, MyBB 1.02 usercp2.php XSS ------------------------------ Devil-00 D3vil-0x1 - Attacking MyBB : [email protected] ----------------------------- File :- usercp2.php Var :- $url Line's :- - 39 - 58 - 84 - 108 - 130 - 149 - 1...
MyBB-search.txt
http://127.0.0.1/mybb/search.php?action=dosearch&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="alertdocument.cookie&sorder=1&showresults=threads&submit=Search --------------------Summary---------------- Software: MyBB Sowtware'...
kapda-25.txt
KAPDA::25 - MyBB 1.x CrossSiteScripting KAPDA New advisory Vulnerable products : MYBB 1.x Vendor: www.mybboard.net/ Risk: medium Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi www.persiax.com Date : -------------------- Found : Jan 21 2006 Vendor Contacted : N/A Release Date :...
CVE-2006-0442
Technical details about CVE-2006-0442 are not publicly provided in the supplied connected documents. The initial listing mentions XSS in MyBB 1.02 via notepad and signature parameters, but lacks concrete product/version/Vendor data beyond that. Monitor for updates.
[KAPDA::#25] - MyBB 1.x Cross_Site_Scripting
KAPDA::25 - MyBB 1.x CrossSiteScripting KAPDA New advisory Vulnerable products : MYBB 1.x Vendor: www.mybboard.net/ Risk: medium Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi www.persiax.com Date : -------------------- Found : Jan 21 2006 Vendor Contacted : N/A Release Date :...
MyBB 1.0.2 XSS attack in search.php redirection
http://127.0.0.1/mybb/search.php?action=dosearch&keywords=&postthread=1&author=imei&matchusername=1&forums=all&findthreadst=1&numreplies=&postdate=0&pddir=1&sortby="script language=javascriptalertdocument.cookie/script&sorder=1&showresults=threads&submit=Search...