CVE-2026-33934: Authorization Bypass Through User-Controlled Key

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a missing authorization check in portal/sign/lib/show-signature.php that allows any authenticated patient portal user to retrieve the drawn signature image of an...

CVE-2011-5278

CVE-2011-5278 describes an SQL injection in the MyBB plugin MyBB Advanced Forum Signatures (afsignatures), specifically in signature.php for version 2.0.4. An attacker can remotely exploit the afs_bar_right parameter to execute arbitrary SQL commands. The vulnerability, classified with a base CVS...

CVE-2011-5277

The CVE-2011-5277 issue concerns the MyBB Advanced Forum Signatures (afsignatures) plugin, specifically version 2.0.4 for MyBB. The vulnerability is an SQL injection in signature.php, exploitable via the parameters (afs_type, afs_background, afs_showonline, afs_bar_left, afs_bar_center, afs_full_...

CVE-2011-5278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

PT-2014-2194

Name of the Vulnerable Software and Affected Versions Advanced Forum Signatures plugin version 2.0.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the afs bar right parameter in the signature.php file of the Advanced Forum Signatures plugin...

PT-2014-2193

Name of the Vulnerable Software and Affected Versions Advanced Forum Signatures plugin version 2.0.4 for MyBB Description The issue concerns SQL injection vulnerabilities in the signature.php file of the Advanced Forum Signatures plugin for MyBB. Remote attackers can execute arbitrary SQL command...

CVE-2011-5277: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

MyBB Advanced Forum Signatures 2.0.4 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures (afsignatures-2.0.4) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date :...

MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...