SQL-Injection in MyBulletinBoard allows attacker to become a board admin.

Vendor: www.mybboard.com Version: 1.00 Preview Release 2, RC4 and mayb prior. Script: usercp.php Code: if$mybb-input'away' == "yes" && $mybb-settings'allowaway' != "no" ... $returndate = $mybb-input'awayday'."-".$mybb-input'awaymonth'."-".$mybb-input'awayyear'; ... $newprofile = array "website" =...

CVE-2005-3022

Multiple SQL injection vulnerabilities in vBulletin 3.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 announcement parameter to announcement.php, 2 userid parameter to user.php, 3 calendar parameter to admincalendar.php, 4 cronid parameter to cronlog.php, 5...

MyBulletinBoard (MyBB) 1.00 RC4 - 'search.php' SQL Injection

mybb is dead /str0ke !/usr/bin/perl Crouz.Com Security Team EXPLOIT FOR: MyBulletinBoard Search.PHP SQL Injection Vulnerability Expl0it By: A l p h a P r o g r a m m e r sirius Email: [email protected] This Xpl Change Admin's Pass For L0gin With P0wer User HACKERS PAL & Devil-00 &...