CVE-2026-33934: Authorization Bypass Through User-Controlled Key

OpenEMR is a free and open source electronic health records and medical practice management application. Versions prior to 8.0.0.3 have a missing authorization check in portal/sign/lib/show-signature.php that allows any authenticated patient portal user to retrieve the drawn signature image of an...

CVE-2011-5277

The CVE-2011-5277 issue concerns the MyBB Advanced Forum Signatures (afsignatures) plugin, specifically version 2.0.4 for MyBB. The vulnerability is an SQL injection in signature.php, exploitable via the parameters (afs_type, afs_background, afs_showonline, afs_bar_left, afs_bar_center, afs_full_...

CVE-2011-5278

CVE-2011-5278 describes an SQL injection in the MyBB plugin MyBB Advanced Forum Signatures (afsignatures), specifically in signature.php for version 2.0.4. An attacker can remotely exploit the afs_bar_right parameter to execute arbitrary SQL commands. The vulnerability, classified with a base CVS...

CVE-2011-5277: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in signature.php in the Advanced Forum Signatures aka afsignatures plugin 2.0.4 for MyBB allow remote attackers to execute arbitrary SQL commands via the 1 afstype, 2 afsbackground, 3 afsshowonline, 4 afsbarleft, 5 afsbarcenter, 6 afsfullline1, 7 afsfullline...

CVE-2011-5278: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in signature.php in Advanced Forum Signatures plugin aka afsignatures 2.0.4 for MyBB allows remote attackers to execute arbitrary SQL commands via the afsbarright parameter...

MyBB Advanced Forum Signatures 2.0.4 SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures (afsignatures-2.0.4) SQL Injection

No description provided by source. --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site :...

MyBB Advanced Forum Signatures - 'afsignatures-2.0.4' SQL Injection

--------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date : 10/10/2011 Site : http://mariovs.pl/ @ : mariovsato2.pl...

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection

MyBB Advanced Forum Signatures - afsignatures-2.0.4 SQL Injection --------------------------------------------------------------------- Exploit Title : MyBB Advanced Forum Signatures afsignatures-2.0.4 --------------------------------------------------------------------- Author : MarioVs Date :...