2260 matches found
Cross site request forgery (csrf)
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters...
CVE-2006-0406
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters...
CVE-2006-0406
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters...
CVE-2006-0406
CVE-2006-0406 affects MyBB 1.0.2: the search.php component can leak schema details by returning a SQL error message that reveals the database table prefix, due to certain search parameters. This is a remote-information-disclosure risk without explicit exploitation details in the provided document...
[SA18603] MyBB User Control Panel Cross-Site Request Forgery
TITLE: MyBB User Control Panel Cross-Site Request Forgery SECUNIA ADVISORY ID: SA18603 VERIFY ADVISORY: http://secunia.com/advisories/18603/ CRITICAL: Less critical IMPACT: Hijacking WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x http://secunia.com/product/4479/ DESCRIPTION: Roozb...
MyBB-sig.txt
NightWarrior nightwarrior771athotmail.com MyBB Signature HTML Code Injection http://www.mybboard.com/ example: Contact :nightwarrior771athotmail.com NightWarrior...
MyBB 1.0.1/1.0.2 Notepad - 'usercp.php' HTML Injection
source: https://www.securityfocus.com/bid/16361/info MyBB is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would be executed in the contex...
MyBB 1.0.11.0.2 Notepad - usercp.php HTML Injection
MyBB 1.0.11.0.2 Notepad - usercp.php HTML Injection source: https://www.securityfocus.com/bid/16361/info MyBB is prone to an HTML-injection vulnerability. This issue is due to a lack of proper sanitization of user-supplied input before using it in dynamically generated content. Attacker-supplied...
Cross site scripting
Cross-site scripting XSS vulnerability in MyBulletinBoard MyBB allows remote attackers to inject arbitrary web script or HTML via a signature containing a JavaScript URI in the SRC attribute of an IMG element, in which the URI uses SGML numeric character references without trailing semicolons, as...
CVE-2006-0364
This entry concerns CVE-2006-0364, a cross-site scripting (XSS) vulnerability in MyBulletinBoard (MyBB). The issue arises when an attacker can inject arbitrary script/HTML via a signature that contains a JavaScript URI in the SRC attribute of an IMG element, where the URI uses SGML numeric charac...
MyBB 1.0.2 Sniffing table perfix bug in search.php
--------------------Summary---------------- Software: mybb Sowtware's Web Site: http://mybboard.com Versions: 1.0.2 Class: Remote Status: Unpatched Exploit: Available Solution: Not Available Discovered by: imei Risk: low -----------------Description--------------- mybb has a security bug that...
MyBB Signature HTML Code Injection
NightWarriorKurdish Hacker nightwarrior771athotmail.com MyBB Signature HTML Code Injection http://www.mybboard.com/ example: img src=&106&97&118&97&115&99&114&105&112&116&58&97&108&101&114&116&40&39&88&83&83&39&41 Contact :nightwarrior771athotmail.com NightWarriorKurdihs Hacker...
[SA18544] MyBB "Allow HTML in Signatures" Script Insertion Security Issue
TITLE: MyBB "Allow HTML in Signatures" Script Insertion Security Issue SECUNIA ADVISORY ID: SA18544 VERIFY ADVISORY: http://secunia.com/advisories/18544/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...
Sql injection
Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0.2 have unspecified impact and attack vectors, related to 1 admin/moderate.php, 2 admin/themes.php, 3 inc/functions.php, 4 inc/functionsupload.php, 5 printthread.php, and 6 usercp.php, and probably related to SQL injection...
CVE-2006-0218
Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0.2 have unspecified impact and attack vectors, related to 1 admin/moderate.php, 2 admin/themes.php, 3 inc/functions.php, 4 inc/functionsupload.php, 5 printthread.php, and 6 usercp.php, and probably related to SQL injection...
CVE-2006-0219
The original distribution of MyBulletinBoard MyBB to update from older versions to 1.0.2 omits or includes older versions of certain critical files, which allows attackers to conduct 1 SQL injection attacks via an attachment name that is not properly handled by inc/functionsupload.php...
CVE-2006-0218
MyBB/MyBulletinBoard has multiple concrete issues in versions before 1.0.2, including CVE-2006-0218 (related to various files and likely SQL injection), CVE-2006-0219 (SQL injection via an attachment name and related threadmode issues in usercp.php), and CVE-2006-0442 (XSS in usercp.php). The fil...
MyBB 1.0.2 SQL injection in usercp.php
this is a bug report for MyBB 1.0.2latest version bug found by imei there is a security bug in usercp.php line 830 that Allows SQL Injection and can result to full access to admin cp. bug is in result of poor checking of $mybb-input'threadmode' value against all other values in usercp.php file...
[SA18281] MyBB Multiple Vulnerabilities
TITLE: MyBB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18281 VERIFY ADVISORY: http://secunia.com/advisories/18281/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...